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", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x105202, 0x1a8) write(0xffffffffffffffff, &(0x7f0000000900)="62e9441fa8d8b0805aad0a80b9a03302318291c318e74a1f9ae44ade559dbf4ab17a5462492def4ffc649cb7f4eb7dfb809a276631c70c25a6a8dd05e275ad9474f4527a2d0d14caca9fd975c8ef5df81ea11f662a6492b802df339589b3d2f981899d35f8692128f6c74007efec8c5c54161fb6f6371b9313529c288888798934364c8e1fc0049bf537a495cc8600724ecc5d694a05da6850dec3a0bc29d46091528ddef6b9894d8325fa8c53d42b2d088e439e6c13350f1b3221763ef902c160b7ab3056c0a2f94d3ddc582c64cd0f2cc3a44e838a90eedef5dffd846a1d35b6b7b90ef6a0b6fcd2a0c0", 0xeb) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0x4}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4d}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x149802, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) pwritev2(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x41c1}, {&(0x7f00000002c0)='^', 0x2}], 0x3, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000780)={{r3}, {@val, @actul_num={@void, 0x77525af3, 0x6b}}}) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x8, @remote, 0x5}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000040)="275b90fcd0e1df1b201105d03076443247486da3", 0x14}, {&(0x7f0000000180)="f5e475dd", 0x4}, {&(0x7f0000000540)="47719e81d45a3bdca808dec81e5dd8d5f39ec856f8f3219f5a0b637385c9ea4dd6765a5b8da92f78195edc1904299e7db5e9d0ed973bbcd614d767445d3bbb2912fc439dc1f92a9a776c5127f8de16ddcd46de3799f879ab6dfcbff5cf1c1e42535dd0425d374ddb709c7c3ff48478b9496b3a09fb0821c2c05861f7f47c6c1abb7ded665be79a3ec0bd65d1f5f921f7b78ba96bbffad802b96748019fbdab5bef2701e712b02c91cadf64529a1a60a44e6e9b6cbc6eaadb38e2c38e6f2ed703a9b892807d7850f49fe60a5c61eb7c4a428e99b1", 0xd4}, {&(0x7f0000000640)="44639ec7d9c94f6f12f7cba147d54b5f990babad682f72c5e7f0fe39f617c99c16d6858762393d70e423eeefebecdd5001146b7d143b848d2f44499ee40ced26d1a75697d7b069fffeedca0af0e964637149a7815b073e3eb35fcddf4be1d9478b4fa3dbd6ed6577ca6eef5bec716f228313a9f345e0d01ac940aa6a552e7d0eefe601784cc8a87ddf8c23353631b9f178b1020f1d0e4b2fe2ff9a5092250613d756e102ebfa08a5cea210e04c19be6811b9f6d6a543bebd55dd024b867e6beb795e", 0xc2}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="17fa007e4e870723766a390000023b06030600000000fe800000000000000000000000000d5dfec832822d83d8ede359f269ce00087580000000000000000000000000001b200000bdaed8427672a3b4f242b3e0fc1cb134696a74f708c87bc199280d0ccce071c61b"], 0x48}}], 0x1, 0x10) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000001c0)={'NETMAP\x00'}, &(0x7f0000000200)=0x1e) getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) 23:11:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x71}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2d}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x400c}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01ee000000000000000006000000"], 0x14}}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9d8f]}, 0x8, 0x80800) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x40800) 23:11:14 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r0, 0x407, 0x6) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:11:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:11:14 executing program 6: syz_mount_image$vfat(&(0x7f0000001580), &(0x7f00000015c0)='./file0\x00', 0x40, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6eef630973652c6e66732c00fc31659286e4a208d048ccde0bdd4ab994bc71190ff6e4eefc140aae40bed9c0be0fb6d819ac48dbc530d865079f50bed77bd125b1c0a33630144b815f005ed88f8077329d65d170f0d7ff6cf8ddec7600abff0f053f80e9ea4f92327e6b1400"/122]) 23:11:14 executing program 3: newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:11:14 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="04d444c28f0000870000006c2d00406c753000"]) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)={0x544, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x2fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x5, 0x20, 0x0, 0x1000, 0x7, 0xd9a]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x1, 0x12, 0x6, 0x3, 0x24, 0x2, 0x6, 0x12, 0x60, 0xc, 0x18, 0x6, 0x12, 0x24, 0x3, 0x18, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7f, 0x8000, 0xffff, 0x3, 0x4, 0x7ff, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x9, 0x30, 0x12, 0x16, 0x48, 0x6c, 0xc, 0x6, 0x6c, 0x3, 0x9, 0x36, 0xb, 0x36, 0x1b, 0x12, 0x9, 0x3, 0x5, 0x36, 0x18, 0xb, 0x16, 0x1b]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x5}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x6, 0x1}, {0x4, 0xa}, {0x7, 0x8}, {0x1, 0x4}, {0x2}, {0x2, 0x2}, {0x0, 0x4}, {0x7}, {0x1, 0x9}, {0x0, 0x3}, {0x6}, {0x7, 0x3}, {0x7}, {0x5, 0x2}, {0x1, 0x3}, {0x4, 0x5}, {0x2}, {0x7, 0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0x1}, {0x5, 0x2}, {0x7, 0x1}, {}, {0x4, 0x2}, {0x0, 0x3}, {0x5, 0x8}, {0x6, 0x9}, {0x6, 0x9}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x7}, {0x6, 0x2}, {0x7, 0x1}, {0x3, 0x7}, {0x4, 0x5}, {0x7, 0x9}, {0x4, 0x5}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x2}, {0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0x7}, {0x2, 0x4}, {0x0, 0x1}, {0x6, 0x9}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x1}, {}, {0x6, 0x9}, {0x3, 0x5}, {0x5, 0xa}, {0x2, 0x9}, {0x7}, {0x5, 0x1}, {0x5, 0x6}, {0x4, 0x8}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x2, 0x7}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x1}, {0x7, 0x9}, {0x3, 0x3}, {0x0, 0x7}, {0x0, 0x2}, {0x5, 0x5}, {0x0, 0xa}, {0x2, 0x7}, {0x2}, {0x4, 0x9}, {0x6, 0x2}]}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x4, 0x79f1646a0475345b, 0x30, 0x30, 0x30, 0x36, 0xb, 0x12, 0x18, 0x6c]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x7, 0x7}, {0x5, 0x7}, {0x6, 0x5}, {0x6, 0x2}, {0x3, 0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x3, 0x2}, {0x6, 0x9}, {0x7, 0x2}, {0x4, 0xa}, {0x7, 0x4}, {0x1, 0x4}, {0x6, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0x7}, {0x1, 0x6}, {0x2, 0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x6}, {0x3, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x7}, {0x0, 0x1}, {0x7, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0xa}, {0x7, 0xa}, {0x1, 0xa}, {0x6, 0x2}, {0x5, 0x6}, {0x2, 0x2}, {0x3, 0x2}, {0x3, 0x5}, {0x7, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x1, 0x5}, {0x2, 0x3}, {0x6, 0x7}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4, 0x9}, {0x3, 0x6}, {0x4, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x9}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0x2}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x5}, {0x6, 0x5}, {0x7, 0x9}, {0x4, 0x1b}, {0x4, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x4}, {0x2, 0x7}, {0x0, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x6, 0x1}, {}, {0x3, 0x5}, {0x1, 0xa}, {0x3, 0x7}, {0x2, 0x6}, {0x4, 0x7}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0x1}, {0x1}, {0x4, 0x4}, {0x2, 0x3}, {0x3, 0x4}, {0x6, 0x2}, {0x6, 0x4}, {0x1}, {0x6, 0x1}, {0x7, 0x1}, {0x3, 0x5}, {0x2, 0x6}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x1}, {0x7, 0xa}, {0x2, 0x9}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x9}, {0x4, 0x4}, {0x6, 0x4}, {0x2, 0x1}, {0x4, 0xa}, {}, {0x4, 0x9}, {0x5, 0x3}, {0x3, 0x2}, {0x7, 0x8}, {0x1}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x4}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x3}, {0x3, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x5, 0x1}, {0x7, 0x5}, {0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x5, 0x3}, {}, {0x0, 0x6}, {0x7, 0x2}, {0x4, 0x2}, {0x4, 0x9}, {0x4, 0x1}, {0x2, 0x9}, {0x3, 0x6}, {0x5}, {0x3, 0xa}, {0x0, 0x4}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x6}, {0x2, 0x9}, {0x7, 0x7}, {0x3, 0x9}, {0x6, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x4, 0x1}, {0x5, 0x2}, {0x5, 0x4}, {0x0, 0xa}, {0x4}, {0x6, 0x4}, {0x1}, {0x1, 0x3}, {0x5}, {0x6}, {0x2, 0x9}, {0x7, 0x6}, {0x7}, {0x4, 0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x3, 0x1}, {0x2, 0x4}, {0x0, 0x4}, {0x1, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0xa}, {0x0, 0x2}, {0x7}, {0x0, 0x9}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x1, 0x7, 0x3, 0xff, 0x4, 0x1, 0x2]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x104, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x6}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x6}, {0x1, 0x3}, {0x4, 0x6}, {0x7, 0x9}, {0x4, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x5, 0x3}, {0x6, 0x8}, {0x7, 0x1}, {0x6, 0x2}, {0x1, 0x7}, {0x7, 0x7}, {0x0, 0x3}, {0x3, 0x5}, {0x6, 0x5}, {0x3, 0x5}, {}, {0x1, 0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0x4}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x0, 0x1}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0x8}, {0x4}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x494c, 0x13dd, 0x1, 0x9, 0xffff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x5, 0x36, 0x5, 0xb, 0x4, 0x3, 0xc, 0xc, 0x1d, 0x6c, 0x12]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0xa}, {0x1, 0x7}, {0x5, 0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0x2}, {0x5, 0x7}, {0x2, 0x6}, {0x1}, {0x4, 0x6}, {0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x6, 0x9}, {0x6, 0x9}, {0x1, 0x9}, {0x4, 0xa}, {0x4, 0x8}, {0x7, 0x5}, {0x7, 0x1}, {0x4}, {0x6, 0x2}, {0x3}, {0x4, 0x5}, {0x3, 0x4}, {0x6, 0x5}, {0x3, 0x7}, {0x4}, {0x5, 0x6}, {0x2, 0x8}, {0x7, 0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0xa}, {0x1}, {0x1, 0x7}, {0x2, 0xa}, {0x4, 0x4}, {0x7}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x5, 0xa}, {0x1, 0x6}, {}, {0x0, 0x9}, {0x1, 0x8}, {0x4, 0x9}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfc01, 0x2, 0xffff, 0x1, 0x1, 0x0, 0x8d]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x16, 0x6, 0x12, 0x16, 0x36, 0x4, 0x36, 0x12, 0x51, 0x1b, 0x48, 0x3, 0x9, 0x14, 0x3, 0x3, 0xc, 0x3, 0x30, 0x30]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x1, 0x9}, {0x3, 0x5}, {0x3, 0x9}, {0x4, 0x9}, {0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0x5}, {0x1, 0xa}, {0x3, 0x4}, {0x5}, {0x4, 0x2}, {0x2, 0x4}, {0x0, 0x5}, {0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x2}, {0x3, 0xa}, {0x2}, {0x2, 0x8}, {0x1, 0x3}, {0x4, 0xa}, {0x3, 0x1}, {0x2}, {0x5, 0x9}, {0x3, 0x6}, {0x0, 0x8}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MESH_SETUP={0x110, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x3}, @NL80211_MESH_SETUP_IE={0xed, 0x3, "40f5daace74f8deb390c2c7f70b5288aa701ff16b093f2810058f4a7e668a01ec5279d139187cf8b57e1cc45a7b9ddac3072d76f4f964e02428a690ba13eeb5ffab698bd0330e7a77a1be800714dae81840ec1f018515b951a0cf5fbe73cac6f574af2fc11c287926b5354bd5829d0c5744111f1947b37c1b1e59ceeede1c0c450438a7412bb07c8e7e11665371c786c3f7da4a61da120cf55be22ca5485b93edd16746bd6c218415ef21346fd1e3c52d7b60fc813c851040a2880f0651d617edf7a6d14dd4ed8df372b6f0aed1a9fdc8b0370e25caf9cefa5214683caa2f7ff40e19413339e1a78cb"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_MESH_SETUP={0xf0, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x71, 0x3, "ecc8cdbc9b0f48f102a35eabd4356911d7bb02a28fbadd808d64db4a9caacf90596ec6e5f104a82831e845f13dcb60d17d2232933dccceb0b6345ee872e745f833e05fd29560f33141382ad795ea02ac5e1a9bd6c898dbc80d7f6414bdd4ddb35230b7191301d9ee885ebb0a06"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_IE={0x46, 0x3, "c3bc7537677c8daa04ff55c38e01a76c2f848437802da69339b2cbc3874a4fef74770f74cbd77433300d40f9bab8d4893a5a64d7fa0af3b57529c131f47b0cb25211"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x544}, 0x1, 0x0, 0x0, 0x4008040}, 0x815) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r4, 0x407, 0x6) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000340)=0x4) perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x81, 0x3, 0x0, 0x3f, 0x0, 0x9, 0x22801, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x450, 0xdce, 0x8001, 0x4, 0x2, 0x81, 0x8, 0x0, 0x8, 0x0, 0x7d}, r4, 0x6, r0, 0xc) 23:11:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:11:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00']) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="79c5f9dafffa979ee1b332bb024d46021919f670d9f0b0b3667cb0a0e5665f3d9d32ed89eb3fc2efdbc6855c32c61f6f0755df98d313253884f3f2df6e5797220ef74ccce3c29040416c5d5ea8781a476bd5b99b2dbe30618120c65eba645ca7327cd5baf66219b1ae443fe125a8ebc0b7fe8df209f923631482d1fcbdd60fe025b048990461a6a75eea783289695dfc8e3c9becb1b00fd95ded27a1596a6317e06408f7011d18", @ANYRESOCT, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64], &(0x7f0000000300)='./file1\x00', &(0x7f0000000240)='fusectl\x00', 0x2180400, &(0x7f0000000400)='\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x200}, 0xfff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66626c653100"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r2) fgetxattr(r2, &(0x7f00000001c0)=@random={'os2.', '\xff\xff\xff\xff\xff\xff'}, &(0x7f0000000340)=""/186, 0xba) pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, 0x0, 0x100000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x2ef4a0706badcd7a) recvfrom(r4, &(0x7f0000000440)=""/185, 0xb9, 0x60, &(0x7f0000000500)=@ethernet={0x1, @broadcast}, 0x80) 23:11:14 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:11:14 executing program 4: newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:11:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r5, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r5, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000200)={0x8001, 0x10, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) 23:11:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:11:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:11:14 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r0, 0x407, 0x6) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:11:14 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:11:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000000000, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000240)) open_tree(r0, &(0x7f0000000140)='./file1\x00', 0x1000) prctl$PR_SET_MM(0x23, 0x9, &(0x7f00003ff000/0xc00000)=nil) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) write(r1, &(0x7f00000000c0)="4c33315ab47dae36e21ab94637ba7e494940a722733e7e5339d6ded4403217a063317a6843d265889b4b1d", 0x2b) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) faccessat2(0xffffffffffffffff, &(0x7f00000013c0)='./file1\x00', 0x100, 0x1100) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) sendfile(r3, r0, &(0x7f0000000200)=0x2, 0x7) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x149802, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) 23:11:30 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:11:30 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@report={0x4c, 0x20, 0x33a, 0x70bd2b, 0x25dfdbfe, {0x2b, {@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4e23, 0x4, 0x4e23, 0x1000, 0x2, 0x20, 0x20, 0x2e, 0x0, r1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc044}, 0x2000c000) 23:11:30 executing program 4: ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d226fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee12eb8459bf1b75803ac062baa94cd7dfdf5af4315946bc0b876e61fa3a5d8f3ac20a51e5c1d58f19000"/215], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000140)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_mount_image$vfat(&(0x7f0000002640), &(0x7f0000002680)='./file1\x00', 0x72, 0x4, &(0x7f00000038c0)=[{&(0x7f00000026c0)="d0eb2d0366c505f2dcaa4fd339b41c6ca61c2b8d2e0416a8716208001e7ef01aa10a9e69a7fce47112aa5a73117023306c861620faae43814adde16054c09ab79eb1e6363e9bb8dd1fc38b8e08a777f04118e26cf8c36aade09017a89bc46fa49935b18c6ac537c6c2252fe0af4bb6878b97619719ad458b6486311204157d27f0dbae74d3e856b5505b215b9f9a5f50ec968e8bde2ea8ee063ad476d219176983d9417422e8f9e47042ef7b4a8242056d7f8416def60378d8", 0xb9, 0xffff}, {&(0x7f0000002780)="e27dad126e001b041ea884e80472b88cd37726720b516f7eaaa3b22e916332aaf1a6ff8f9457ce96bf5538899cc67d5cc9c86a9841e0977b26e5b0e04479c6a437d7b632aae6fc6cd1df38e36b6dab172bae806696031f2c79e8da89420d1a54a6ae559b6c384372544ac0080c2bdaa4478e5ae560716d98b4d768cf6598fddeb4ed5548f004b30f7d2393697e157f9a4fd9ee30d047c97c2b255fd925e0969e0b8806067a9f81dd27791135b224d8e7b559c67d8673aa3aaec75786163223b521d607f392679373964ef70ccf04e95762", 0xd1, 0xff}, {&(0x7f0000002880)="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", 0x1000, 0x8000}, {&(0x7f0000003880)="d2c6d405c54b531ace9a570b93e394d488e9c6ddb0e32935ee08a4a7", 0x1c, 0xffffffff80000000}], 0x88008, &(0x7f0000000300)={[{@shortname_lower}, {@rodir}, {@utf8no}, {@nonumtail}, {@uni_xlate}, {@nonumtail}, {@utf8}, {@shortname_mixed}, {@fat=@usefree}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, '&.'}}, {@obj_user}, {@subj_user}]}) 23:11:30 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:11:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r5, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r5, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000200)={0x8001, 0x10, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) 23:11:30 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:11:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:11:30 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:11:30 executing program 4: ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d226fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee12eb8459bf1b75803ac062baa94cd7dfdf5af4315946bc0b876e61fa3a5d8f3ac20a51e5c1d58f19000"/215], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000140)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_mount_image$vfat(&(0x7f0000002640), &(0x7f0000002680)='./file1\x00', 0x72, 0x4, &(0x7f00000038c0)=[{&(0x7f00000026c0)="d0eb2d0366c505f2dcaa4fd339b41c6ca61c2b8d2e0416a8716208001e7ef01aa10a9e69a7fce47112aa5a73117023306c861620faae43814adde16054c09ab79eb1e6363e9bb8dd1fc38b8e08a777f04118e26cf8c36aade09017a89bc46fa49935b18c6ac537c6c2252fe0af4bb6878b97619719ad458b6486311204157d27f0dbae74d3e856b5505b215b9f9a5f50ec968e8bde2ea8ee063ad476d219176983d9417422e8f9e47042ef7b4a8242056d7f8416def60378d8", 0xb9, 0xffff}, {&(0x7f0000002780)="e27dad126e001b041ea884e80472b88cd37726720b516f7eaaa3b22e916332aaf1a6ff8f9457ce96bf5538899cc67d5cc9c86a9841e0977b26e5b0e04479c6a437d7b632aae6fc6cd1df38e36b6dab172bae806696031f2c79e8da89420d1a54a6ae559b6c384372544ac0080c2bdaa4478e5ae560716d98b4d768cf6598fddeb4ed5548f004b30f7d2393697e157f9a4fd9ee30d047c97c2b255fd925e0969e0b8806067a9f81dd27791135b224d8e7b559c67d8673aa3aaec75786163223b521d607f392679373964ef70ccf04e95762", 0xd1, 0xff}, {&(0x7f0000002880)="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", 0x1000, 0x8000}, {&(0x7f0000003880)="d2c6d405c54b531ace9a570b93e394d488e9c6ddb0e32935ee08a4a7", 0x1c, 0xffffffff80000000}], 0x88008, &(0x7f0000000300)={[{@shortname_lower}, {@rodir}, {@utf8no}, {@nonumtail}, {@uni_xlate}, {@nonumtail}, {@utf8}, {@shortname_mixed}, {@fat=@usefree}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, '&.'}}, {@obj_user}, {@subj_user}]}) 23:11:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r0 = getpgrp(0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000100)) r3 = socket$inet6(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r3, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:11:30 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) r7 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x40000061}, 0x0) io_uring_enter(r7, 0x1, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) sendmsg$unix(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002100)="e2", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="c8dd5d2abe0000ffff"], 0x20}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:11:30 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:11:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = io_uring_setup(0x2761, &(0x7f0000000400)={0x0, 0xb998, 0xe, 0x3, 0x13a, 0x0, r2}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r3], 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x381240, 0xaa) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1e7}}, './file1\x00'}) openat(r6, &(0x7f0000000380)='./file1/file0\x00', 0x20200, 0x10a) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) 23:11:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r5, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r5, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000200)={0x8001, 0x10, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) 23:11:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) [ 436.205796] loop0: detected capacity change from 0 to 40 23:11:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r5, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r5, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000200)={0x8001, 0x10, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) [ 436.326224] syz-executor.0: attempt to access beyond end of device [ 436.326224] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 436.327285] buffer_io_error: 54 callbacks suppressed [ 436.327293] Buffer I/O error on dev loop0, logical block 10, lost async page write 23:11:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:11:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = io_uring_setup(0x2761, &(0x7f0000000400)={0x0, 0xb998, 0xe, 0x3, 0x13a, 0x0, r2}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r3], 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x381240, 0xaa) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1e7}}, './file1\x00'}) openat(r6, &(0x7f0000000380)='./file1/file0\x00', 0x20200, 0x10a) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) 23:11:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x40a42) writev(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x16, 0x0, 0x9}, {{0x0, 0xea60}, 0x16, 0x8, 0x7785d87c}, {{0x77359400}, 0x15, 0x4, 0x6}, {{}, 0x4, 0x70, 0x7}, {{0x77359400}, 0x6, 0x200, 0x400}, {{r1, r2/1000+60000}, 0x0, 0x0, 0x6}, {{0x0, 0x2710}, 0x1f, 0x4, 0x3d}, {{}, 0x14, 0xf800, 0x6}, {{0x77359400}, 0x0, 0x80, 0x9f5}, {{r3, r4/1000+10000}, 0x5, 0x5, 0x5}], 0xf0) 23:11:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:11:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r0 = getpgrp(0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000100)) r3 = socket$inet6(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r3, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:11:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = io_uring_setup(0x2761, &(0x7f0000000400)={0x0, 0xb998, 0xe, 0x3, 0x13a, 0x0, r2}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r3], 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x381240, 0xaa) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1e7}}, './file1\x00'}) openat(r6, &(0x7f0000000380)='./file1/file0\x00', 0x20200, 0x10a) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) 23:11:44 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:11:44 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) [ 450.085180] loop0: detected capacity change from 0 to 40 23:11:44 executing program 4: msgctl$MSG_INFO(0x0, 0xc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000a670184caa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"], 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000180)=""/97) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') pread64(r4, &(0x7f0000000180)=""/8, 0x8, 0x8) futimesat(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000b80)={{0x77359400}, {0x77359400}}) openat(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0x20000, 0x85) [ 450.462920] syz-executor.0: attempt to access beyond end of device [ 450.462920] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 450.464037] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 450.515737] syz-executor.4 (5227) used greatest stack depth: 22896 bytes left 23:11:59 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0) poll(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r2, r2, 0x0) 23:11:59 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:11:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:11:59 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:11:59 executing program 4: msgctl$MSG_INFO(0x0, 0xc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000a670184caa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"], 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000180)=""/97) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') pread64(r4, &(0x7f0000000180)=""/8, 0x8, 0x8) futimesat(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000b80)={{0x77359400}, {0x77359400}}) openat(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0x20000, 0x85) 23:11:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:11:59 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:11:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r0 = getpgrp(0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000100)) r3 = socket$inet6(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r3, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:11:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:11:59 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0) poll(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r2, r2, 0x0) 23:11:59 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x4) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x7f, 0x7, 0x4, 0x0, 0xff, 0x218, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffe01, 0x4, @perf_config_ext={0x9414, 0x7fff}, 0x6, 0x1f, 0x2, 0x6, 0x2dc89d, 0x1ff, 0x7, 0x0, 0x8, 0x0, 0x80}, 0xffffffffffffffff, 0x9, r1, 0x9) getpid() epoll_create(0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(0xffffffffffffffff) flistxattr(0xffffffffffffffff, &(0x7f0000000100)=""/79, 0x4f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x4, 0x0, 0xf, 0x0, 0x0, 0xb6, 0x40121, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:11:59 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:11:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:11:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r2, 0x10, r1, 0x2) 23:11:59 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r0, 0xb) 23:11:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:11:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:13 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r0, 0xb) 23:12:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:12:13 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setregid(r1, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) mount$9p_fd(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x400, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_9p2000}, {@posixacl}, {@nodevmap}, {@noextend}], [{@appraise_type}, {@seclabel}, {@appraise_type}]}}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1000, 0x8, &(0x7f00000017c0)=[{&(0x7f0000000180)="35fbb4993016077cf61ef4415bfe417231fafab308957716f4aa4e9d39265ce001f1a661e116d85fef0fcff237c6cc26", 0x30, 0x2b}, {&(0x7f0000000380)="dbb4636659d71cc5ec4f7a7a315dd77f8b322f3e101bce3b065960b803260974dc04ba5d790da6ca63d290187be861840197a2606a2a19679fa73da032c582235085430ba772dc8beda61cd27d9a3352926355fa0bd4abf30838a4e3313264537c4b5e2263530ae5b83a3970ffd01e41373781865e9ebbb220e973d9dfd43eb83807e2ff0e46a47d0e86adde6ae74b242b6111bc8f23c6c40cc9b651b3607d837b25da3eb214ddbbc42f17440bc8c215f9cd89f2be96d2b00fff8436bf27255cf123b1867cc935ac", 0xc8, 0x8e}, {&(0x7f00000001c0)="01e6a828f6c265127b2dc98fd8f2de72323a0623048d83", 0x17, 0xffffffffffffffea}, {&(0x7f00000004c0)="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", 0x1000, 0x3}, {&(0x7f00000014c0)="b17a66efcb587331038cc0121c50ec4f55cba56c20d731ce5e706100111dafc8378b9af99108f0df2cffa902ca8ed3b7fb62891ed8d2cc9ddef77fd8e41feed377ef99f79c38e2535667a3ee6629a73b6fb3786b84a1db5d3021d6951c15af818f192609e424fbd7014a69102b7cd5836f2cd15e3c72adca850b80e2aa76698ba7f030de6cf5fcd267e37362", 0x8c, 0x3}, {&(0x7f0000001580)="1ffdeccd269bbb85f824d95adc71925d02cfe543464c9cd057bdb86a832ad46d53dd8bb037445a9795d332", 0x2b, 0xff}, {&(0x7f00000015c0)="6b83f222b17febdbfb60eed6abb29f68f80d39ac89c76c434f176ea6c19fdbf348f545ff9fb31311a2142770d29542ce620dc34dc2709fe35243fecaa9f61f57db6f6d1af844f91be330be1534e9506f50fb4f86cfa31688587e23b97e4fed4866ac1a815b0a7687f774f870f3281aede955efefcb1ce039cd328fcb273855f3a6e13e295383d0d7b58a542b51ec7eaca82312b557918a67d2af6e908bb9336d7100f93dc0bafc77a8f6f5ae53a08bb0172beb588a85b6adc42af91d2a8a1879a82ad43a3cd2f8b85d9af0b3af2e1ff82ef54939dc13d96a5429ecf0838372b34f70fe", 0xe3, 0x323}, {&(0x7f00000016c0)="e8e8a0532ad3f4d0398f44c3d9404af1f55782aad1da9ef45158692805aa92506cda9953102edca881ef609b40e45c919f1755671e822adc14ac2cb1dd60733876a634e8ae391f7dce51b163f5e47e57fea57f6ef39760539b0c31c6cb232a516db1fbd5f61dc67322fb838f52ddcbd441778dd157c94ec7c243344f83a49437005c909b6fa6e02d1967364e9a5073e606c52d90abea0e8848fb0f4e0680a2412cd0d2adb6efd7153e4d5d8830f043f7a960b0b034e424d1a87ed9bc9d54dab063ea02cbe161fa4fde6ac4af3490ee3f5c", 0xd1, 0x4}], 0x2c001, &(0x7f0000001880)={[{@gid={'gid', 0x3d, 0xee01}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x35]}}}}, {@huge_never}, {@huge_within_size}, {@gid={'gid', 0x3d, r1}}, {@huge_advise}, {@huge_advise}, {@huge_within_size}, {@size={'size', 0x3d, [0x67, 0x30, 0x78, 0x39, 0x30]}}], [{@subj_role}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '}+\''}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '^$+\\@]'}}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r3, 0x407, 0x6) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000340)=0x4) openat(r3, &(0x7f0000001b00)='./file0\x00', 0x1, 0xcf) 23:12:13 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0) poll(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r2, r2, 0x0) 23:12:13 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:13 executing program 2: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r1 = getpgrp(0xffffffffffffffff) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r1}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x1, 0x0) openat(r0, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r5, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r4, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:12:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r2, 0x10, r1, 0x2) 23:12:13 executing program 2: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r1 = getpgrp(0xffffffffffffffff) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r1}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x1, 0x0) openat(r0, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r5, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r4, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:13 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:13 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = syz_io_uring_complete(r7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r11, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) 23:12:13 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r0, 0xb) 23:12:13 executing program 2: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r1 = getpgrp(0xffffffffffffffff) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r1}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x1, 0x0) openat(r0, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r5, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r4, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:13 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setregid(r1, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) mount$9p_fd(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x400, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_9p2000}, {@posixacl}, {@nodevmap}, {@noextend}], [{@appraise_type}, {@seclabel}, {@appraise_type}]}}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1000, 0x8, &(0x7f00000017c0)=[{&(0x7f0000000180)="35fbb4993016077cf61ef4415bfe417231fafab308957716f4aa4e9d39265ce001f1a661e116d85fef0fcff237c6cc26", 0x30, 0x2b}, {&(0x7f0000000380)="dbb4636659d71cc5ec4f7a7a315dd77f8b322f3e101bce3b065960b803260974dc04ba5d790da6ca63d290187be861840197a2606a2a19679fa73da032c582235085430ba772dc8beda61cd27d9a3352926355fa0bd4abf30838a4e3313264537c4b5e2263530ae5b83a3970ffd01e41373781865e9ebbb220e973d9dfd43eb83807e2ff0e46a47d0e86adde6ae74b242b6111bc8f23c6c40cc9b651b3607d837b25da3eb214ddbbc42f17440bc8c215f9cd89f2be96d2b00fff8436bf27255cf123b1867cc935ac", 0xc8, 0x8e}, {&(0x7f00000001c0)="01e6a828f6c265127b2dc98fd8f2de72323a0623048d83", 0x17, 0xffffffffffffffea}, {&(0x7f00000004c0)="b4de35b342c31fb861bafd670fa3403f35daae90fe9137634f39f3667107886d090cad731b8fbc1b1bb5d2f4f1387708fd36f3c6bc0b8e70fd74e4c647b5d3bfb238f023142465fc8a74b610c3a6e0e07f61230deb5b8b1639cac84a585616c38270b462de173ce83a5fdb2ca7133d4ea30c780bcb87260769451994548419618ffad908c8109ee881f58613cb2960a66f93c854ba62c9de858c85485bab43f5527ece3c7d6c5a8d3a5ebe178a8afba0144ab28936ec10aa77ee3518093435cc524105e07a534aa24d4b1fe9a63bf3b79798b6c379ef6afdc719e7060f096275ef9f5b0a6c9adcf3b6376286601ff0afc6ba7d13391f4240c6c29179a9ab0609084a3c9b9019b9e7ada0b8fb56583149c9c99bfd91a0eddddf3ddc3f969c49df51d1951c4313b463bc2e85fe1605a14754ea3de36ed028ed322232c913e57ad2073ea925c1b7bf9706758bd87195530ce60f19f114bb86471363d3a61f939818a64b87e36584240d1b0a3e90250cb97d1d598d794e2e92b71a98365ab8da427b5fbedbb41124e8de0b904e8d70583f77db9da0a46b9ba0b7636a560a1562ccc11099ad2ff4629f69104a0ea999e0ef4e9dc55b592a24882d0ad49211a9eddff5abe9f5a5916f91f4dcaa5389945492582fa54cea98b58dbba11e696121debd7a15355468e4636244dd9c58a03f16eb61833644d819f348bb5e9d8286b1c230ad3ee981412003d594f4264014f5ce8645bb1d28f760c031fdf27662cef423e22407609c4b0d9025249d07623831b94dd05c1a0641b6c13e9eda2bf2023a2e0787f07ce1ff49814b56b6c1fb25a78518b4d92b4336a975b46d5e68fc1c81734008ea1bc25cb43373e70110cbe3495fd2cdf255dc85759de774470e71af98ad79c389cbcca9090b49ad6cec8d289330e33fb2538598bfa095e653ef5795434318f2afcbc0b5c9d1982b2b197a19b1f6434b2234a7988a8079d834d99466ffafa471bf51273971670dc38ce6013924e63c830224f4c02db777fb39f53ea70eadb6225309ae15fb369d0fb02732358a82842c0edd8a0fcbad41e7d063e4b44c820c3ee05273c245748082191db50d11ad6245f7f173b82e30ad4d82293e49492b9bd887c1fda24aaa637f49125f0909e8da79bdbe23163b778eed3e850e7241942f3c6fb72573db92b4f4d53cb253212bddcd426d901b1f8bc11118483ba5d0ae8f21ff15c7d450625c620e17635375b3bc09d1851853fda2115324dd50617f933f249f87711f992900a4a2cc0c88b539f5cdaec7ae3b7932f87cd09eb5a00e0d02eb7e5b78464f7f389b5cdec8c82b9650fe01c9bcd5714f18ab8efec099ad490eea97aa170d1daf8e94e3726aba72b92dc2cb4dcb7568041e275bc340ba1367629b41ded806e51696828b8882af004e2491c0f4ad1ab09bee007906324798574495c6bb0c7f716b165232df0c7d943bd1a9033bac9de7cea18b57ac2e5ffbf1a20d2eec970527c0248af8d5b2d39ddc83ca7ed3ac9557d865059db37381e8c663f0af122707799ebb6b8996254d892df5b273b4903e66234d139258c3641551d81cb7c3afb01ef520b537595c317456f34b3e270c279581604fd871e5587657d7c4696ed126e423c6af5b8716811bcc639c3ea5c928e0d8c8dacf95ce47b6bcc1e54a90c7f8bdc488af3dccc35c2527c1db16c29221bc04ec960359fb4a3c6b9e3a1ac4267108e5361abc59e109f98017003f74308cab0423d5a355210268ec7cb78d98f6d481b1b28b14e8ebd4eaf6a715eec77698a67afdea72e21ec6f31940d45d81a976eb49c7191af420e33ddba367c96e5497ffeb444b2bc7460c2d39ad90fb2a751d05f4912e7158e653463774a53122adc4bc9ebb5e7f377dc18053fed7d32ce9a7ccf5e7152ccfe8fe036df371ce3a21f2b4bb858cce6e4a71d0956cd605e676d6b2e7a667304765d5117796d00d2a7bdee1cb43a2df76a2a55c0f2f7b0c3bc957d2f801a961387aee4151d195838d840c9d721004346af957154a09d3546319a5ba95cc9e1782e8f072948a0353daabe6847ed6a1f77971940bb448c1f1dd96e3841866fbad67ac70fdf87470c0331823141a385af70cba619d39a4b788b193c9b5aba9c6a1b0ddd73b5eb92b7e3cd36f06792d8229c989fae1ece22670670ec617de1659c93bab495c4317429e19561bc604f45518db8ecd2d4cc63b11e17b71478d7f28bd9581b9c55afb78ddc7a0dd22231bedf1b212f9bba8d3b6830a2992db532146e602e67e0fa5e5bfcb81469a43baf6611c5f1780564702b92ddbb9935ecb0db86cdbecdfada13f6f12b1845da45372fd135ea760c6b385c4bca42fa39e05553b7892494081e0daad4fb9d1213037fd9e5cd4b962b5a44281a7aa94feaa59dd999b5ab882850bfc7c87e5a180c908a85ef6dbe6fe414bb041c7038bc9dca4340efa54aae5ebfe0087e8fe052b65e4673e6c92c023c8d4bddede9259fc47dac994e20e8ed52d00d6e25c51d974a17e86785b70f79394fd4304bb453490338f296b4fed26ae21a3c8f8e80389cacb04751ab2c485e7b5fb7e3106c48b5f00fc1eb0aefae4874d454c05af416d26766b62237ddf97eaa542118910d39c228fd4ae2fd5dd86fcf062bec27dfaa2cf0dd83d932904c8da974f7a424075f832e30ad310553c42555cf9aecc278272b97ea216397fb2e719185a323a9a87cf89513582e356f9b2ed983a58b7e76a69ec415964d572f653ca9480b7adda38609d16174d2a6e45d3bdd0a81610bbc89c49b930e6ac07e5cc8918f1e10263fdbb53676f6fd9a65bb0f775d81bbe6c43e16c951f4614849cf907f51a7a0cc2b256d723668dc976e6810175996a406b639ff66e57dffdfedb65a41f37d32a4576f6930a6e1c9efb44606a271e0197de672cb80f0a3020e4c08231636964bad67ee60de231ff22825f3482e02a6b3f651fe89f79395716bd695b81c1f1fcd4b7430b23d21f3104d35ab6d3485f6d90c5e442a29bbd56d8f95fd767e9d2882f2a8bc1b9ae233206cfd54e251daf91195c9790be37d860ecebe30a70a12235c0ada3f4ba47fecad4ce016cad7414d20f013b65f1ad6d23749668f36d966cf0dcc110fc454063a04ad8597463707940822f21d3a4580c78698985c52904d26244eb755bfb14c6e95288f3c5792a5761f3b4e75b5fa7da6c83374dbc76abfb9dd8629ce67f72eb5bbfa6cddc7be7cfc8c9c694d3860e2105ea9e304936a6b71b11ea00614a504cf07b58b75eebb01cb35a0fe7f6bf9cb3cc127ae142a2b5d860c89a6930095d44182a748ea66d3064f14db8dbaa4bf24a6f6bb54282fc579e084ad1be1c2f7a42cd39244c3f888297d4592690b8aca158988d75cbee4ad18b6329d6fa747632c428a5c6200ef90ab2cb7132b3568cbd243de5ca54bc03209ce198dee8f690bb55880ee6d06b57b5ed28e5011ac96a25aa2147b366eb11ef869de3e39d5df5c55c9df9511c65e4cf542e6dd663e0091d7df7ca4fa0330cb2eabc80f82853b6af2c1dcda6ccda2223b39f8ac65e2fda9d2b0068056f0dddd45c92fb7b8371ad952abec27dea3a55b104b28442cc8927d9d6c0ceb5fa9770fc9f7da3022731ea9d5c4b732f71ed19dfbdc7d7d987491a7b36f9f860244077dd921f1758cb3b5d2f0b8c726e2bd9b77bd196cc0c7bd6c629a4589cc76e969b88aa71b3ff0eb2cdb27f13e6523644f796c1de74ad71b48b865a40cc158af05fbf55c21acf1d24c21bbdf793d1d6351669d223419002b2848062e50d66495172636f6ca1ef19c038bdbd47bf44ffd79c2d8bdb46b8c68870ca126c467841522d49b2c2df280c3d9c8a57aef5a26a3a33705c1663c72540f9b21c35965829834fb7588459f9981d8e2d5084c69f9ec651bc4404181888e78a8e0f1809b1b03c7b4558734c2eba1976d868ffce6a711c81f2a76c9437e1751f1bb99e542b7057d1c1a1e073943f11c98a792198282a5d08ea3c22acc4d5cb8af615c6d4f9f59af2ec4201b34d35835ee1648881eb259e6bce3e86d3ffb42be3379c8ec4bf2ba184b218a9f969f2fb48b18463fe6aa4ea7d6a50743747d394c1efb76ab1169c6deaaeb1d3c9740ebb05d877d598837476a17c73b0d201c5ddc075e7cf71751379ebeec99bbdabc10c0fc8998d5a9b0cb682d654bc247c9965b2832d28fc02c6fb2f3a36d6ad04d4f602b2974b9192b7cad5c51d0be970e0b9dff423e424c090b50bbfd386ec5d3c9c73bedbc2fcb666228e0182c9b70c4f24dbb36b354f1b5ba1e6ed9ddde2010f19a2e0171effda1c07f2696d3d7467f7253f20fab0b33555820c08908a4f3295d73a7bb8b2ef7091552725f00fb7d775482f47824370395b3610f2a6bd1ad5188b7bb713e36ca0d417bda58bcdc8117c0f2089e1cc8ef1f90372c8603a02567062c10df65e0baefa805388659decc5f21ad41f725319f90214e71de7f4765e79bd311e3a2a9a2304b64da77689ac51be29363bd16f36bcc4eb53339b8b099e3c230ccc01593e9c4ecbf4bc8496a739828735b3203654c931a73f2c4707bb322f67173297147b3346be92f119aa831eb95f7d5df264611b8317892a8737db0695a3d49cecb7b6faf6a61edde21516ef0fc01cd5a3e8284508d886fd6d24b9d0cd88e298fa2b794ef2f8ce72c9e495a8897fe3b54d5e97402c4951a42c4d6681a594b096cfef521d6f89f3691ef35275738e8957b14f0a19f3e00c7fa949094ff403767fcb48e30fffadf254f6bfd5a3bca31a8acf1d941cdd505d1619d8fb822af2e88988b036ff0e7bf61934f571e3cb8f7d7aab4a8a7c05cb41f468d8312bd7bca54e400b7b43560aff234094b84b2a04b347e40e248fbef6a28fa929d6e2d41c0b9ac4535b5c5a2fb991b96e8abdc91f5ba85ac519693ed27e0c667eff9935ca39ba171fa0f8b3af1290a07e4f8ec7f056ce9d492b17a1316d43c4e31f92dabe37f4338be8d5912593fddb5a38a0e35518bb6c5d2cc974e194e779a0c1d8fc1f89b563fd8435fc8aaedab992a05336800c0fc1f62d404a2233054876e8699f8c317b01def14e0a020e6eb015be473a8489d37bf3b0e3d27b48c6ef0b508e11e64c6519ad06703c81e28f4960565974cfb7e1b51b633fb0e69b9031d9c0e4bd5f8432a9cef7b124cfb9cb538e3ff3a86912e2393be68c821a8386a4842707ba060b352c9bba1bd12cf132041fafa77406032792b145d77a66fda5e05a69d1d7a5bbc72b50aff8a77b9b2e5d713b52f2f5a5ec6752455460cdf71acbbcc5fa1f8b2d5107667314e9915be3aa5243f2b30ae9ab0d3019a30d9acdf98416dcc94bf90e91f9376c2fceeed9e3cc7035ddbb11fa09646a48acc0e4582e88e5f875c3f0221915abfa7b94689e197d20da435f31d3aaecb8c7b6dd3bb7f5e274c5cfbb4db3a3243d2a74fedc134dafcc95a2c91cea24df62f97466942c96a68b1c53ea0e21758a31eea78af0592bdc06fb604f2ebcf04e41f30e48c27e50b3033123e25668b10d2e6956387f586474c6814a63a014d190400f24fb7674e518ba0fe4875800e2d28c5956157583a27af6fa9a95445dbc8537b4aefcddab9b7c0d6fa4abea86cf6f75c044846dbbf465b6fe2674f1308be5c06d8d490492b50658f46644da7e2e9d9e5253cf57e72b0f3d9f918a9d05d89b91e378df2b86c3bbdc7d1bae58582ab689746fad0cbe0d8e3c6206cdff41f2a01ec72a25717e820da25309fac6abbe5dc0c6a2db7a76129d12a3c2951e987cdf2f14394e127505977cba", 0x1000, 0x3}, {&(0x7f00000014c0)="b17a66efcb587331038cc0121c50ec4f55cba56c20d731ce5e706100111dafc8378b9af99108f0df2cffa902ca8ed3b7fb62891ed8d2cc9ddef77fd8e41feed377ef99f79c38e2535667a3ee6629a73b6fb3786b84a1db5d3021d6951c15af818f192609e424fbd7014a69102b7cd5836f2cd15e3c72adca850b80e2aa76698ba7f030de6cf5fcd267e37362", 0x8c, 0x3}, {&(0x7f0000001580)="1ffdeccd269bbb85f824d95adc71925d02cfe543464c9cd057bdb86a832ad46d53dd8bb037445a9795d332", 0x2b, 0xff}, {&(0x7f00000015c0)="6b83f222b17febdbfb60eed6abb29f68f80d39ac89c76c434f176ea6c19fdbf348f545ff9fb31311a2142770d29542ce620dc34dc2709fe35243fecaa9f61f57db6f6d1af844f91be330be1534e9506f50fb4f86cfa31688587e23b97e4fed4866ac1a815b0a7687f774f870f3281aede955efefcb1ce039cd328fcb273855f3a6e13e295383d0d7b58a542b51ec7eaca82312b557918a67d2af6e908bb9336d7100f93dc0bafc77a8f6f5ae53a08bb0172beb588a85b6adc42af91d2a8a1879a82ad43a3cd2f8b85d9af0b3af2e1ff82ef54939dc13d96a5429ecf0838372b34f70fe", 0xe3, 0x323}, {&(0x7f00000016c0)="e8e8a0532ad3f4d0398f44c3d9404af1f55782aad1da9ef45158692805aa92506cda9953102edca881ef609b40e45c919f1755671e822adc14ac2cb1dd60733876a634e8ae391f7dce51b163f5e47e57fea57f6ef39760539b0c31c6cb232a516db1fbd5f61dc67322fb838f52ddcbd441778dd157c94ec7c243344f83a49437005c909b6fa6e02d1967364e9a5073e606c52d90abea0e8848fb0f4e0680a2412cd0d2adb6efd7153e4d5d8830f043f7a960b0b034e424d1a87ed9bc9d54dab063ea02cbe161fa4fde6ac4af3490ee3f5c", 0xd1, 0x4}], 0x2c001, &(0x7f0000001880)={[{@gid={'gid', 0x3d, 0xee01}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x35]}}}}, {@huge_never}, {@huge_within_size}, {@gid={'gid', 0x3d, r1}}, {@huge_advise}, {@huge_advise}, {@huge_within_size}, {@size={'size', 0x3d, [0x67, 0x30, 0x78, 0x39, 0x30]}}], [{@subj_role}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '}+\''}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '^$+\\@]'}}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r3, 0x407, 0x6) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000340)=0x4) openat(r3, &(0x7f0000001b00)='./file0\x00', 0x1, 0xcf) 23:12:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:12:13 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:13 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = syz_io_uring_complete(r7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r11, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) 23:12:13 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:13 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, 0x0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:12:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r2, 0x10, r1, 0x2) 23:12:13 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = syz_io_uring_complete(r7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r11, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) 23:12:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:12:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:12:28 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, 0x0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:12:28 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:28 executing program 1: pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:28 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = syz_io_uring_complete(r7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r11, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) 23:12:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r3, 0x10, r2, 0x2) 23:12:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setregid(r1, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) mount$9p_fd(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x400, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_9p2000}, {@posixacl}, {@nodevmap}, {@noextend}], [{@appraise_type}, {@seclabel}, {@appraise_type}]}}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1000, 0x8, &(0x7f00000017c0)=[{&(0x7f0000000180)="35fbb4993016077cf61ef4415bfe417231fafab308957716f4aa4e9d39265ce001f1a661e116d85fef0fcff237c6cc26", 0x30, 0x2b}, {&(0x7f0000000380)="dbb4636659d71cc5ec4f7a7a315dd77f8b322f3e101bce3b065960b803260974dc04ba5d790da6ca63d290187be861840197a2606a2a19679fa73da032c582235085430ba772dc8beda61cd27d9a3352926355fa0bd4abf30838a4e3313264537c4b5e2263530ae5b83a3970ffd01e41373781865e9ebbb220e973d9dfd43eb83807e2ff0e46a47d0e86adde6ae74b242b6111bc8f23c6c40cc9b651b3607d837b25da3eb214ddbbc42f17440bc8c215f9cd89f2be96d2b00fff8436bf27255cf123b1867cc935ac", 0xc8, 0x8e}, {&(0x7f00000001c0)="01e6a828f6c265127b2dc98fd8f2de72323a0623048d83", 0x17, 0xffffffffffffffea}, {&(0x7f00000004c0)="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", 0x1000, 0x3}, {&(0x7f00000014c0)="b17a66efcb587331038cc0121c50ec4f55cba56c20d731ce5e706100111dafc8378b9af99108f0df2cffa902ca8ed3b7fb62891ed8d2cc9ddef77fd8e41feed377ef99f79c38e2535667a3ee6629a73b6fb3786b84a1db5d3021d6951c15af818f192609e424fbd7014a69102b7cd5836f2cd15e3c72adca850b80e2aa76698ba7f030de6cf5fcd267e37362", 0x8c, 0x3}, {&(0x7f0000001580)="1ffdeccd269bbb85f824d95adc71925d02cfe543464c9cd057bdb86a832ad46d53dd8bb037445a9795d332", 0x2b, 0xff}, {&(0x7f00000015c0)="6b83f222b17febdbfb60eed6abb29f68f80d39ac89c76c434f176ea6c19fdbf348f545ff9fb31311a2142770d29542ce620dc34dc2709fe35243fecaa9f61f57db6f6d1af844f91be330be1534e9506f50fb4f86cfa31688587e23b97e4fed4866ac1a815b0a7687f774f870f3281aede955efefcb1ce039cd328fcb273855f3a6e13e295383d0d7b58a542b51ec7eaca82312b557918a67d2af6e908bb9336d7100f93dc0bafc77a8f6f5ae53a08bb0172beb588a85b6adc42af91d2a8a1879a82ad43a3cd2f8b85d9af0b3af2e1ff82ef54939dc13d96a5429ecf0838372b34f70fe", 0xe3, 0x323}, {&(0x7f00000016c0)="e8e8a0532ad3f4d0398f44c3d9404af1f55782aad1da9ef45158692805aa92506cda9953102edca881ef609b40e45c919f1755671e822adc14ac2cb1dd60733876a634e8ae391f7dce51b163f5e47e57fea57f6ef39760539b0c31c6cb232a516db1fbd5f61dc67322fb838f52ddcbd441778dd157c94ec7c243344f83a49437005c909b6fa6e02d1967364e9a5073e606c52d90abea0e8848fb0f4e0680a2412cd0d2adb6efd7153e4d5d8830f043f7a960b0b034e424d1a87ed9bc9d54dab063ea02cbe161fa4fde6ac4af3490ee3f5c", 0xd1, 0x4}], 0x2c001, &(0x7f0000001880)={[{@gid={'gid', 0x3d, 0xee01}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x35]}}}}, {@huge_never}, {@huge_within_size}, {@gid={'gid', 0x3d, r1}}, {@huge_advise}, {@huge_advise}, {@huge_within_size}, {@size={'size', 0x3d, [0x67, 0x30, 0x78, 0x39, 0x30]}}], [{@subj_role}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '}+\''}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '^$+\\@]'}}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r3, 0x407, 0x6) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000340)=0x4) openat(r3, &(0x7f0000001b00)='./file0\x00', 0x1, 0xcf) 23:12:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setregid(r1, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) mount$9p_fd(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x400, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_9p2000}, {@posixacl}, {@nodevmap}, {@noextend}], [{@appraise_type}, {@seclabel}, {@appraise_type}]}}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1000, 0x8, &(0x7f00000017c0)=[{&(0x7f0000000180)="35fbb4993016077cf61ef4415bfe417231fafab308957716f4aa4e9d39265ce001f1a661e116d85fef0fcff237c6cc26", 0x30, 0x2b}, {&(0x7f0000000380)="dbb4636659d71cc5ec4f7a7a315dd77f8b322f3e101bce3b065960b803260974dc04ba5d790da6ca63d290187be861840197a2606a2a19679fa73da032c582235085430ba772dc8beda61cd27d9a3352926355fa0bd4abf30838a4e3313264537c4b5e2263530ae5b83a3970ffd01e41373781865e9ebbb220e973d9dfd43eb83807e2ff0e46a47d0e86adde6ae74b242b6111bc8f23c6c40cc9b651b3607d837b25da3eb214ddbbc42f17440bc8c215f9cd89f2be96d2b00fff8436bf27255cf123b1867cc935ac", 0xc8, 0x8e}, {&(0x7f00000001c0)="01e6a828f6c265127b2dc98fd8f2de72323a0623048d83", 0x17, 0xffffffffffffffea}, {&(0x7f00000004c0)="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", 0x1000, 0x3}, {&(0x7f00000014c0)="b17a66efcb587331038cc0121c50ec4f55cba56c20d731ce5e706100111dafc8378b9af99108f0df2cffa902ca8ed3b7fb62891ed8d2cc9ddef77fd8e41feed377ef99f79c38e2535667a3ee6629a73b6fb3786b84a1db5d3021d6951c15af818f192609e424fbd7014a69102b7cd5836f2cd15e3c72adca850b80e2aa76698ba7f030de6cf5fcd267e37362", 0x8c, 0x3}, {&(0x7f0000001580)="1ffdeccd269bbb85f824d95adc71925d02cfe543464c9cd057bdb86a832ad46d53dd8bb037445a9795d332", 0x2b, 0xff}, {&(0x7f00000015c0)="6b83f222b17febdbfb60eed6abb29f68f80d39ac89c76c434f176ea6c19fdbf348f545ff9fb31311a2142770d29542ce620dc34dc2709fe35243fecaa9f61f57db6f6d1af844f91be330be1534e9506f50fb4f86cfa31688587e23b97e4fed4866ac1a815b0a7687f774f870f3281aede955efefcb1ce039cd328fcb273855f3a6e13e295383d0d7b58a542b51ec7eaca82312b557918a67d2af6e908bb9336d7100f93dc0bafc77a8f6f5ae53a08bb0172beb588a85b6adc42af91d2a8a1879a82ad43a3cd2f8b85d9af0b3af2e1ff82ef54939dc13d96a5429ecf0838372b34f70fe", 0xe3, 0x323}, {&(0x7f00000016c0)="e8e8a0532ad3f4d0398f44c3d9404af1f55782aad1da9ef45158692805aa92506cda9953102edca881ef609b40e45c919f1755671e822adc14ac2cb1dd60733876a634e8ae391f7dce51b163f5e47e57fea57f6ef39760539b0c31c6cb232a516db1fbd5f61dc67322fb838f52ddcbd441778dd157c94ec7c243344f83a49437005c909b6fa6e02d1967364e9a5073e606c52d90abea0e8848fb0f4e0680a2412cd0d2adb6efd7153e4d5d8830f043f7a960b0b034e424d1a87ed9bc9d54dab063ea02cbe161fa4fde6ac4af3490ee3f5c", 0xd1, 0x4}], 0x2c001, &(0x7f0000001880)={[{@gid={'gid', 0x3d, 0xee01}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x35]}}}}, {@huge_never}, {@huge_within_size}, {@gid={'gid', 0x3d, r1}}, {@huge_advise}, {@huge_advise}, {@huge_within_size}, {@size={'size', 0x3d, [0x67, 0x30, 0x78, 0x39, 0x30]}}], [{@subj_role}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '}+\''}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '^$+\\@]'}}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r3, 0x407, 0x6) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000340)=0x4) openat(r3, &(0x7f0000001b00)='./file0\x00', 0x1, 0xcf) 23:12:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r3, 0x10, r2, 0x2) 23:12:28 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, 0x0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:12:28 executing program 1: pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:28 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = syz_io_uring_complete(r7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r11, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) 23:12:28 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:12:40 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = syz_io_uring_complete(r7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r11, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) 23:12:40 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:40 executing program 1: pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:40 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_io_uring_complete(r7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r8, 0x1) 23:12:40 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setregid(r1, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) mount$9p_fd(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x400, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_9p2000}, {@posixacl}, {@nodevmap}, {@noextend}], [{@appraise_type}, {@seclabel}, {@appraise_type}]}}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1000, 0x8, &(0x7f00000017c0)=[{&(0x7f0000000180)="35fbb4993016077cf61ef4415bfe417231fafab308957716f4aa4e9d39265ce001f1a661e116d85fef0fcff237c6cc26", 0x30, 0x2b}, {&(0x7f0000000380)="dbb4636659d71cc5ec4f7a7a315dd77f8b322f3e101bce3b065960b803260974dc04ba5d790da6ca63d290187be861840197a2606a2a19679fa73da032c582235085430ba772dc8beda61cd27d9a3352926355fa0bd4abf30838a4e3313264537c4b5e2263530ae5b83a3970ffd01e41373781865e9ebbb220e973d9dfd43eb83807e2ff0e46a47d0e86adde6ae74b242b6111bc8f23c6c40cc9b651b3607d837b25da3eb214ddbbc42f17440bc8c215f9cd89f2be96d2b00fff8436bf27255cf123b1867cc935ac", 0xc8, 0x8e}, {&(0x7f00000001c0)="01e6a828f6c265127b2dc98fd8f2de72323a0623048d83", 0x17, 0xffffffffffffffea}, {&(0x7f00000004c0)="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", 0x1000, 0x3}, {&(0x7f00000014c0)="b17a66efcb587331038cc0121c50ec4f55cba56c20d731ce5e706100111dafc8378b9af99108f0df2cffa902ca8ed3b7fb62891ed8d2cc9ddef77fd8e41feed377ef99f79c38e2535667a3ee6629a73b6fb3786b84a1db5d3021d6951c15af818f192609e424fbd7014a69102b7cd5836f2cd15e3c72adca850b80e2aa76698ba7f030de6cf5fcd267e37362", 0x8c, 0x3}, {&(0x7f0000001580)="1ffdeccd269bbb85f824d95adc71925d02cfe543464c9cd057bdb86a832ad46d53dd8bb037445a9795d332", 0x2b, 0xff}, {&(0x7f00000015c0)="6b83f222b17febdbfb60eed6abb29f68f80d39ac89c76c434f176ea6c19fdbf348f545ff9fb31311a2142770d29542ce620dc34dc2709fe35243fecaa9f61f57db6f6d1af844f91be330be1534e9506f50fb4f86cfa31688587e23b97e4fed4866ac1a815b0a7687f774f870f3281aede955efefcb1ce039cd328fcb273855f3a6e13e295383d0d7b58a542b51ec7eaca82312b557918a67d2af6e908bb9336d7100f93dc0bafc77a8f6f5ae53a08bb0172beb588a85b6adc42af91d2a8a1879a82ad43a3cd2f8b85d9af0b3af2e1ff82ef54939dc13d96a5429ecf0838372b34f70fe", 0xe3, 0x323}, {&(0x7f00000016c0)="e8e8a0532ad3f4d0398f44c3d9404af1f55782aad1da9ef45158692805aa92506cda9953102edca881ef609b40e45c919f1755671e822adc14ac2cb1dd60733876a634e8ae391f7dce51b163f5e47e57fea57f6ef39760539b0c31c6cb232a516db1fbd5f61dc67322fb838f52ddcbd441778dd157c94ec7c243344f83a49437005c909b6fa6e02d1967364e9a5073e606c52d90abea0e8848fb0f4e0680a2412cd0d2adb6efd7153e4d5d8830f043f7a960b0b034e424d1a87ed9bc9d54dab063ea02cbe161fa4fde6ac4af3490ee3f5c", 0xd1, 0x4}], 0x2c001, &(0x7f0000001880)={[{@gid={'gid', 0x3d, 0xee01}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x35]}}}}, {@huge_never}, {@huge_within_size}, {@gid={'gid', 0x3d, r1}}, {@huge_advise}, {@huge_advise}, {@huge_within_size}, {@size={'size', 0x3d, [0x67, 0x30, 0x78, 0x39, 0x30]}}], [{@subj_role}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '}+\''}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '^$+\\@]'}}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r3, 0x407, 0x6) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000340)=0x4) 23:12:40 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:12:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r3, 0x10, r2, 0x2) 23:12:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r4, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 23:12:40 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:41 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, r0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:12:41 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setregid(r1, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) mount$9p_fd(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x400, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_9p2000}, {@posixacl}, {@nodevmap}, {@noextend}], [{@appraise_type}, {@seclabel}, {@appraise_type}]}}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1000, 0x8, &(0x7f00000017c0)=[{&(0x7f0000000180)="35fbb4993016077cf61ef4415bfe417231fafab308957716f4aa4e9d39265ce001f1a661e116d85fef0fcff237c6cc26", 0x30, 0x2b}, {&(0x7f0000000380)="dbb4636659d71cc5ec4f7a7a315dd77f8b322f3e101bce3b065960b803260974dc04ba5d790da6ca63d290187be861840197a2606a2a19679fa73da032c582235085430ba772dc8beda61cd27d9a3352926355fa0bd4abf30838a4e3313264537c4b5e2263530ae5b83a3970ffd01e41373781865e9ebbb220e973d9dfd43eb83807e2ff0e46a47d0e86adde6ae74b242b6111bc8f23c6c40cc9b651b3607d837b25da3eb214ddbbc42f17440bc8c215f9cd89f2be96d2b00fff8436bf27255cf123b1867cc935ac", 0xc8, 0x8e}, {&(0x7f00000001c0)="01e6a828f6c265127b2dc98fd8f2de72323a0623048d83", 0x17, 0xffffffffffffffea}, {&(0x7f00000004c0)="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", 0x1000, 0x3}, {&(0x7f00000014c0)="b17a66efcb587331038cc0121c50ec4f55cba56c20d731ce5e706100111dafc8378b9af99108f0df2cffa902ca8ed3b7fb62891ed8d2cc9ddef77fd8e41feed377ef99f79c38e2535667a3ee6629a73b6fb3786b84a1db5d3021d6951c15af818f192609e424fbd7014a69102b7cd5836f2cd15e3c72adca850b80e2aa76698ba7f030de6cf5fcd267e37362", 0x8c, 0x3}, {&(0x7f0000001580)="1ffdeccd269bbb85f824d95adc71925d02cfe543464c9cd057bdb86a832ad46d53dd8bb037445a9795d332", 0x2b, 0xff}, {&(0x7f00000015c0)="6b83f222b17febdbfb60eed6abb29f68f80d39ac89c76c434f176ea6c19fdbf348f545ff9fb31311a2142770d29542ce620dc34dc2709fe35243fecaa9f61f57db6f6d1af844f91be330be1534e9506f50fb4f86cfa31688587e23b97e4fed4866ac1a815b0a7687f774f870f3281aede955efefcb1ce039cd328fcb273855f3a6e13e295383d0d7b58a542b51ec7eaca82312b557918a67d2af6e908bb9336d7100f93dc0bafc77a8f6f5ae53a08bb0172beb588a85b6adc42af91d2a8a1879a82ad43a3cd2f8b85d9af0b3af2e1ff82ef54939dc13d96a5429ecf0838372b34f70fe", 0xe3, 0x323}, {&(0x7f00000016c0)="e8e8a0532ad3f4d0398f44c3d9404af1f55782aad1da9ef45158692805aa92506cda9953102edca881ef609b40e45c919f1755671e822adc14ac2cb1dd60733876a634e8ae391f7dce51b163f5e47e57fea57f6ef39760539b0c31c6cb232a516db1fbd5f61dc67322fb838f52ddcbd441778dd157c94ec7c243344f83a49437005c909b6fa6e02d1967364e9a5073e606c52d90abea0e8848fb0f4e0680a2412cd0d2adb6efd7153e4d5d8830f043f7a960b0b034e424d1a87ed9bc9d54dab063ea02cbe161fa4fde6ac4af3490ee3f5c", 0xd1, 0x4}], 0x2c001, &(0x7f0000001880)={[{@gid={'gid', 0x3d, 0xee01}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x35]}}}}, {@huge_never}, {@huge_within_size}, {@gid={'gid', 0x3d, r1}}, {@huge_advise}, {@huge_advise}, {@huge_within_size}, {@size={'size', 0x3d, [0x67, 0x30, 0x78, 0x39, 0x30]}}], [{@subj_role}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '}+\''}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '^$+\\@]'}}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r3, 0x407, 0x6) 23:12:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r3, 0x10, r2, 0x2) 23:12:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:41 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_complete(r7) 23:12:41 executing program 1: open(0x0, 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:41 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setregid(r1, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) mount$9p_fd(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x400, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_9p2000}, {@posixacl}, {@nodevmap}, {@noextend}], [{@appraise_type}, {@seclabel}, {@appraise_type}]}}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1000, 0x8, &(0x7f00000017c0)=[{&(0x7f0000000180)="35fbb4993016077cf61ef4415bfe417231fafab308957716f4aa4e9d39265ce001f1a661e116d85fef0fcff237c6cc26", 0x30, 0x2b}, {&(0x7f0000000380)="dbb4636659d71cc5ec4f7a7a315dd77f8b322f3e101bce3b065960b803260974dc04ba5d790da6ca63d290187be861840197a2606a2a19679fa73da032c582235085430ba772dc8beda61cd27d9a3352926355fa0bd4abf30838a4e3313264537c4b5e2263530ae5b83a3970ffd01e41373781865e9ebbb220e973d9dfd43eb83807e2ff0e46a47d0e86adde6ae74b242b6111bc8f23c6c40cc9b651b3607d837b25da3eb214ddbbc42f17440bc8c215f9cd89f2be96d2b00fff8436bf27255cf123b1867cc935ac", 0xc8, 0x8e}, {&(0x7f00000001c0)="01e6a828f6c265127b2dc98fd8f2de72323a0623048d83", 0x17, 0xffffffffffffffea}, {&(0x7f00000004c0)="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", 0x1000, 0x3}, {&(0x7f00000014c0)="b17a66efcb587331038cc0121c50ec4f55cba56c20d731ce5e706100111dafc8378b9af99108f0df2cffa902ca8ed3b7fb62891ed8d2cc9ddef77fd8e41feed377ef99f79c38e2535667a3ee6629a73b6fb3786b84a1db5d3021d6951c15af818f192609e424fbd7014a69102b7cd5836f2cd15e3c72adca850b80e2aa76698ba7f030de6cf5fcd267e37362", 0x8c, 0x3}, {&(0x7f0000001580)="1ffdeccd269bbb85f824d95adc71925d02cfe543464c9cd057bdb86a832ad46d53dd8bb037445a9795d332", 0x2b, 0xff}, {&(0x7f00000015c0)="6b83f222b17febdbfb60eed6abb29f68f80d39ac89c76c434f176ea6c19fdbf348f545ff9fb31311a2142770d29542ce620dc34dc2709fe35243fecaa9f61f57db6f6d1af844f91be330be1534e9506f50fb4f86cfa31688587e23b97e4fed4866ac1a815b0a7687f774f870f3281aede955efefcb1ce039cd328fcb273855f3a6e13e295383d0d7b58a542b51ec7eaca82312b557918a67d2af6e908bb9336d7100f93dc0bafc77a8f6f5ae53a08bb0172beb588a85b6adc42af91d2a8a1879a82ad43a3cd2f8b85d9af0b3af2e1ff82ef54939dc13d96a5429ecf0838372b34f70fe", 0xe3, 0x323}, {&(0x7f00000016c0)="e8e8a0532ad3f4d0398f44c3d9404af1f55782aad1da9ef45158692805aa92506cda9953102edca881ef609b40e45c919f1755671e822adc14ac2cb1dd60733876a634e8ae391f7dce51b163f5e47e57fea57f6ef39760539b0c31c6cb232a516db1fbd5f61dc67322fb838f52ddcbd441778dd157c94ec7c243344f83a49437005c909b6fa6e02d1967364e9a5073e606c52d90abea0e8848fb0f4e0680a2412cd0d2adb6efd7153e4d5d8830f043f7a960b0b034e424d1a87ed9bc9d54dab063ea02cbe161fa4fde6ac4af3490ee3f5c", 0xd1, 0x4}], 0x2c001, &(0x7f0000001880)={[{@gid={'gid', 0x3d, 0xee01}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x35]}}}}, {@huge_never}, {@huge_within_size}, {@gid={'gid', 0x3d, r1}}, {@huge_advise}, {@huge_advise}, {@huge_within_size}, {@size={'size', 0x3d, [0x67, 0x30, 0x78, 0x39, 0x30]}}], [{@subj_role}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '}+\''}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '^$+\\@]'}}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 23:12:41 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = syz_io_uring_complete(r7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r11, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) 23:12:56 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = syz_io_uring_complete(r7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r11, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) 23:12:56 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, 0x0) shmctl$SHM_LOCK(r1, 0xb) 23:12:56 executing program 1: open(0x0, 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:56 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r4, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 23:12:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r3, 0x10, r2, 0x2) 23:12:56 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setregid(r1, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) mount$9p_fd(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x400, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_9p2000}, {@posixacl}, {@nodevmap}, {@noextend}], [{@appraise_type}, {@seclabel}, {@appraise_type}]}}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1000, 0x8, &(0x7f00000017c0)=[{&(0x7f0000000180)="35fbb4993016077cf61ef4415bfe417231fafab308957716f4aa4e9d39265ce001f1a661e116d85fef0fcff237c6cc26", 0x30, 0x2b}, {&(0x7f0000000380)="dbb4636659d71cc5ec4f7a7a315dd77f8b322f3e101bce3b065960b803260974dc04ba5d790da6ca63d290187be861840197a2606a2a19679fa73da032c582235085430ba772dc8beda61cd27d9a3352926355fa0bd4abf30838a4e3313264537c4b5e2263530ae5b83a3970ffd01e41373781865e9ebbb220e973d9dfd43eb83807e2ff0e46a47d0e86adde6ae74b242b6111bc8f23c6c40cc9b651b3607d837b25da3eb214ddbbc42f17440bc8c215f9cd89f2be96d2b00fff8436bf27255cf123b1867cc935ac", 0xc8, 0x8e}, {&(0x7f00000001c0)="01e6a828f6c265127b2dc98fd8f2de72323a0623048d83", 0x17, 0xffffffffffffffea}, {&(0x7f00000004c0)="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", 0x1000, 0x3}, {&(0x7f00000014c0)="b17a66efcb587331038cc0121c50ec4f55cba56c20d731ce5e706100111dafc8378b9af99108f0df2cffa902ca8ed3b7fb62891ed8d2cc9ddef77fd8e41feed377ef99f79c38e2535667a3ee6629a73b6fb3786b84a1db5d3021d6951c15af818f192609e424fbd7014a69102b7cd5836f2cd15e3c72adca850b80e2aa76698ba7f030de6cf5fcd267e37362", 0x8c, 0x3}, {&(0x7f0000001580)="1ffdeccd269bbb85f824d95adc71925d02cfe543464c9cd057bdb86a832ad46d53dd8bb037445a9795d332", 0x2b, 0xff}, {&(0x7f00000015c0)="6b83f222b17febdbfb60eed6abb29f68f80d39ac89c76c434f176ea6c19fdbf348f545ff9fb31311a2142770d29542ce620dc34dc2709fe35243fecaa9f61f57db6f6d1af844f91be330be1534e9506f50fb4f86cfa31688587e23b97e4fed4866ac1a815b0a7687f774f870f3281aede955efefcb1ce039cd328fcb273855f3a6e13e295383d0d7b58a542b51ec7eaca82312b557918a67d2af6e908bb9336d7100f93dc0bafc77a8f6f5ae53a08bb0172beb588a85b6adc42af91d2a8a1879a82ad43a3cd2f8b85d9af0b3af2e1ff82ef54939dc13d96a5429ecf0838372b34f70fe", 0xe3, 0x323}, {&(0x7f00000016c0)="e8e8a0532ad3f4d0398f44c3d9404af1f55782aad1da9ef45158692805aa92506cda9953102edca881ef609b40e45c919f1755671e822adc14ac2cb1dd60733876a634e8ae391f7dce51b163f5e47e57fea57f6ef39760539b0c31c6cb232a516db1fbd5f61dc67322fb838f52ddcbd441778dd157c94ec7c243344f83a49437005c909b6fa6e02d1967364e9a5073e606c52d90abea0e8848fb0f4e0680a2412cd0d2adb6efd7153e4d5d8830f043f7a960b0b034e424d1a87ed9bc9d54dab063ea02cbe161fa4fde6ac4af3490ee3f5c", 0xd1, 0x4}], 0x2c001, &(0x7f0000001880)={[{@gid={'gid', 0x3d, 0xee01}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x35]}}}}, {@huge_never}, {@huge_within_size}, {@gid={'gid', 0x3d, r1}}, {@huge_advise}, {@huge_advise}, {@huge_within_size}, {@size={'size', 0x3d, [0x67, 0x30, 0x78, 0x39, 0x30]}}], [{@subj_role}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '}+\''}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '^$+\\@]'}}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r2) 23:12:56 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) 23:12:56 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:12:56 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_io_uring_complete(r7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r8, 0x1) 23:13:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r4, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 23:13:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r3, 0x10, r2, 0x2) 23:13:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:13:11 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, 0x0) shmctl$SHM_LOCK(r1, 0xb) 23:13:11 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_complete(r7) 23:13:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setregid(r1, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) mount$9p_fd(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x400, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_9p2000}, {@posixacl}, {@nodevmap}, {@noextend}], [{@appraise_type}, {@seclabel}, {@appraise_type}]}}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1000, 0x8, &(0x7f00000017c0)=[{&(0x7f0000000180)="35fbb4993016077cf61ef4415bfe417231fafab308957716f4aa4e9d39265ce001f1a661e116d85fef0fcff237c6cc26", 0x30, 0x2b}, {&(0x7f0000000380)="dbb4636659d71cc5ec4f7a7a315dd77f8b322f3e101bce3b065960b803260974dc04ba5d790da6ca63d290187be861840197a2606a2a19679fa73da032c582235085430ba772dc8beda61cd27d9a3352926355fa0bd4abf30838a4e3313264537c4b5e2263530ae5b83a3970ffd01e41373781865e9ebbb220e973d9dfd43eb83807e2ff0e46a47d0e86adde6ae74b242b6111bc8f23c6c40cc9b651b3607d837b25da3eb214ddbbc42f17440bc8c215f9cd89f2be96d2b00fff8436bf27255cf123b1867cc935ac", 0xc8, 0x8e}, {&(0x7f00000001c0)="01e6a828f6c265127b2dc98fd8f2de72323a0623048d83", 0x17, 0xffffffffffffffea}, {&(0x7f00000004c0)="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", 0x1000, 0x3}, {&(0x7f00000014c0)="b17a66efcb587331038cc0121c50ec4f55cba56c20d731ce5e706100111dafc8378b9af99108f0df2cffa902ca8ed3b7fb62891ed8d2cc9ddef77fd8e41feed377ef99f79c38e2535667a3ee6629a73b6fb3786b84a1db5d3021d6951c15af818f192609e424fbd7014a69102b7cd5836f2cd15e3c72adca850b80e2aa76698ba7f030de6cf5fcd267e37362", 0x8c, 0x3}, {&(0x7f0000001580)="1ffdeccd269bbb85f824d95adc71925d02cfe543464c9cd057bdb86a832ad46d53dd8bb037445a9795d332", 0x2b, 0xff}, {&(0x7f00000015c0)="6b83f222b17febdbfb60eed6abb29f68f80d39ac89c76c434f176ea6c19fdbf348f545ff9fb31311a2142770d29542ce620dc34dc2709fe35243fecaa9f61f57db6f6d1af844f91be330be1534e9506f50fb4f86cfa31688587e23b97e4fed4866ac1a815b0a7687f774f870f3281aede955efefcb1ce039cd328fcb273855f3a6e13e295383d0d7b58a542b51ec7eaca82312b557918a67d2af6e908bb9336d7100f93dc0bafc77a8f6f5ae53a08bb0172beb588a85b6adc42af91d2a8a1879a82ad43a3cd2f8b85d9af0b3af2e1ff82ef54939dc13d96a5429ecf0838372b34f70fe", 0xe3, 0x323}, {&(0x7f00000016c0)="e8e8a0532ad3f4d0398f44c3d9404af1f55782aad1da9ef45158692805aa92506cda9953102edca881ef609b40e45c919f1755671e822adc14ac2cb1dd60733876a634e8ae391f7dce51b163f5e47e57fea57f6ef39760539b0c31c6cb232a516db1fbd5f61dc67322fb838f52ddcbd441778dd157c94ec7c243344f83a49437005c909b6fa6e02d1967364e9a5073e606c52d90abea0e8848fb0f4e0680a2412cd0d2adb6efd7153e4d5d8830f043f7a960b0b034e424d1a87ed9bc9d54dab063ea02cbe161fa4fde6ac4af3490ee3f5c", 0xd1, 0x4}], 0x2c001, &(0x7f0000001880)={[{@gid={'gid', 0x3d, 0xee01}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x35]}}}}, {@huge_never}, {@huge_within_size}, {@gid={'gid', 0x3d, r1}}, {@huge_advise}, {@huge_advise}, {@huge_within_size}, {@size={'size', 0x3d, [0x67, 0x30, 0x78, 0x39, 0x30]}}], [{@subj_role}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '}+\''}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '^$+\\@]'}}]}) socket$inet6_udp(0xa, 0x2, 0x0) 23:13:11 executing program 1: open(0x0, 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:13:11 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 23:13:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:13:11 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) 23:13:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setregid(r1, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) mount$9p_fd(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x400, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_9p2000}, {@posixacl}, {@nodevmap}, {@noextend}], [{@appraise_type}, {@seclabel}, {@appraise_type}]}}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1000, 0x8, &(0x7f00000017c0)=[{&(0x7f0000000180)="35fbb4993016077cf61ef4415bfe417231fafab308957716f4aa4e9d39265ce001f1a661e116d85fef0fcff237c6cc26", 0x30, 0x2b}, {&(0x7f0000000380)="dbb4636659d71cc5ec4f7a7a315dd77f8b322f3e101bce3b065960b803260974dc04ba5d790da6ca63d290187be861840197a2606a2a19679fa73da032c582235085430ba772dc8beda61cd27d9a3352926355fa0bd4abf30838a4e3313264537c4b5e2263530ae5b83a3970ffd01e41373781865e9ebbb220e973d9dfd43eb83807e2ff0e46a47d0e86adde6ae74b242b6111bc8f23c6c40cc9b651b3607d837b25da3eb214ddbbc42f17440bc8c215f9cd89f2be96d2b00fff8436bf27255cf123b1867cc935ac", 0xc8, 0x8e}, {&(0x7f00000001c0)="01e6a828f6c265127b2dc98fd8f2de72323a0623048d83", 0x17, 0xffffffffffffffea}, {&(0x7f00000004c0)="b4de35b342c31fb861bafd670fa3403f35daae90fe9137634f39f3667107886d090cad731b8fbc1b1bb5d2f4f1387708fd36f3c6bc0b8e70fd74e4c647b5d3bfb238f023142465fc8a74b610c3a6e0e07f61230deb5b8b1639cac84a585616c38270b462de173ce83a5fdb2ca7133d4ea30c780bcb87260769451994548419618ffad908c8109ee881f58613cb2960a66f93c854ba62c9de858c85485bab43f5527ece3c7d6c5a8d3a5ebe178a8afba0144ab28936ec10aa77ee3518093435cc524105e07a534aa24d4b1fe9a63bf3b79798b6c379ef6afdc719e7060f096275ef9f5b0a6c9adcf3b6376286601ff0afc6ba7d13391f4240c6c29179a9ab0609084a3c9b9019b9e7ada0b8fb56583149c9c99bfd91a0eddddf3ddc3f969c49df51d1951c4313b463bc2e85fe1605a14754ea3de36ed028ed322232c913e57ad2073ea925c1b7bf9706758bd87195530ce60f19f114bb86471363d3a61f939818a64b87e36584240d1b0a3e90250cb97d1d598d794e2e92b71a98365ab8da427b5fbedbb41124e8de0b904e8d70583f77db9da0a46b9ba0b7636a560a1562ccc11099ad2ff4629f69104a0ea999e0ef4e9dc55b592a24882d0ad49211a9eddff5abe9f5a5916f91f4dcaa5389945492582fa54cea98b58dbba11e696121debd7a15355468e4636244dd9c58a03f16eb61833644d819f348bb5e9d8286b1c230ad3ee981412003d594f4264014f5ce8645bb1d28f760c031fdf27662cef423e22407609c4b0d9025249d07623831b94dd05c1a0641b6c13e9eda2bf2023a2e0787f07ce1ff49814b56b6c1fb25a78518b4d92b4336a975b46d5e68fc1c81734008ea1bc25cb43373e70110cbe3495fd2cdf255dc85759de774470e71af98ad79c389cbcca9090b49ad6cec8d289330e33fb2538598bfa095e653ef5795434318f2afcbc0b5c9d1982b2b197a19b1f6434b2234a7988a8079d834d99466ffafa471bf51273971670dc38ce6013924e63c830224f4c02db777fb39f53ea70eadb6225309ae15fb369d0fb02732358a82842c0edd8a0fcbad41e7d063e4b44c820c3ee05273c245748082191db50d11ad6245f7f173b82e30ad4d82293e49492b9bd887c1fda24aaa637f49125f0909e8da79bdbe23163b778eed3e850e7241942f3c6fb72573db92b4f4d53cb253212bddcd426d901b1f8bc11118483ba5d0ae8f21ff15c7d450625c620e17635375b3bc09d1851853fda2115324dd50617f933f249f87711f992900a4a2cc0c88b539f5cdaec7ae3b7932f87cd09eb5a00e0d02eb7e5b78464f7f389b5cdec8c82b9650fe01c9bcd5714f18ab8efec099ad490eea97aa170d1daf8e94e3726aba72b92dc2cb4dcb7568041e275bc340ba1367629b41ded806e51696828b8882af004e2491c0f4ad1ab09bee007906324798574495c6bb0c7f716b165232df0c7d943bd1a9033bac9de7cea18b57ac2e5ffbf1a20d2eec970527c0248af8d5b2d39ddc83ca7ed3ac9557d865059db37381e8c663f0af122707799ebb6b8996254d892df5b273b4903e66234d139258c3641551d81cb7c3afb01ef520b537595c317456f34b3e270c279581604fd871e5587657d7c4696ed126e423c6af5b8716811bcc639c3ea5c928e0d8c8dacf95ce47b6bcc1e54a90c7f8bdc488af3dccc35c2527c1db16c29221bc04ec960359fb4a3c6b9e3a1ac4267108e5361abc59e109f98017003f74308cab0423d5a355210268ec7cb78d98f6d481b1b28b14e8ebd4eaf6a715eec77698a67afdea72e21ec6f31940d45d81a976eb49c7191af420e33ddba367c96e5497ffeb444b2bc7460c2d39ad90fb2a751d05f4912e7158e653463774a53122adc4bc9ebb5e7f377dc18053fed7d32ce9a7ccf5e7152ccfe8fe036df371ce3a21f2b4bb858cce6e4a71d0956cd605e676d6b2e7a667304765d5117796d00d2a7bdee1cb43a2df76a2a55c0f2f7b0c3bc957d2f801a961387aee4151d195838d840c9d721004346af957154a09d3546319a5ba95cc9e1782e8f072948a0353daabe6847ed6a1f77971940bb448c1f1dd96e3841866fbad67ac70fdf87470c0331823141a385af70cba619d39a4b788b193c9b5aba9c6a1b0ddd73b5eb92b7e3cd36f06792d8229c989fae1ece22670670ec617de1659c93bab495c4317429e19561bc604f45518db8ecd2d4cc63b11e17b71478d7f28bd9581b9c55afb78ddc7a0dd22231bedf1b212f9bba8d3b6830a2992db532146e602e67e0fa5e5bfcb81469a43baf6611c5f1780564702b92ddbb9935ecb0db86cdbecdfada13f6f12b1845da45372fd135ea760c6b385c4bca42fa39e05553b7892494081e0daad4fb9d1213037fd9e5cd4b962b5a44281a7aa94feaa59dd999b5ab882850bfc7c87e5a180c908a85ef6dbe6fe414bb041c7038bc9dca4340efa54aae5ebfe0087e8fe052b65e4673e6c92c023c8d4bddede9259fc47dac994e20e8ed52d00d6e25c51d974a17e86785b70f79394fd4304bb453490338f296b4fed26ae21a3c8f8e80389cacb04751ab2c485e7b5fb7e3106c48b5f00fc1eb0aefae4874d454c05af416d26766b62237ddf97eaa542118910d39c228fd4ae2fd5dd86fcf062bec27dfaa2cf0dd83d932904c8da974f7a424075f832e30ad310553c42555cf9aecc278272b97ea216397fb2e719185a323a9a87cf89513582e356f9b2ed983a58b7e76a69ec415964d572f653ca9480b7adda38609d16174d2a6e45d3bdd0a81610bbc89c49b930e6ac07e5cc8918f1e10263fdbb53676f6fd9a65bb0f775d81bbe6c43e16c951f4614849cf907f51a7a0cc2b256d723668dc976e6810175996a406b639ff66e57dffdfedb65a41f37d32a4576f6930a6e1c9efb44606a271e0197de672cb80f0a3020e4c08231636964bad67ee60de231ff22825f3482e02a6b3f651fe89f79395716bd695b81c1f1fcd4b7430b23d21f3104d35ab6d3485f6d90c5e442a29bbd56d8f95fd767e9d2882f2a8bc1b9ae233206cfd54e251daf91195c9790be37d860ecebe30a70a12235c0ada3f4ba47fecad4ce016cad7414d20f013b65f1ad6d23749668f36d966cf0dcc110fc454063a04ad8597463707940822f21d3a4580c78698985c52904d26244eb755bfb14c6e95288f3c5792a5761f3b4e75b5fa7da6c83374dbc76abfb9dd8629ce67f72eb5bbfa6cddc7be7cfc8c9c694d3860e2105ea9e304936a6b71b11ea00614a504cf07b58b75eebb01cb35a0fe7f6bf9cb3cc127ae142a2b5d860c89a6930095d44182a748ea66d3064f14db8dbaa4bf24a6f6bb54282fc579e084ad1be1c2f7a42cd39244c3f888297d4592690b8aca158988d75cbee4ad18b6329d6fa747632c428a5c6200ef90ab2cb7132b3568cbd243de5ca54bc03209ce198dee8f690bb55880ee6d06b57b5ed28e5011ac96a25aa2147b366eb11ef869de3e39d5df5c55c9df9511c65e4cf542e6dd663e0091d7df7ca4fa0330cb2eabc80f82853b6af2c1dcda6ccda2223b39f8ac65e2fda9d2b0068056f0dddd45c92fb7b8371ad952abec27dea3a55b104b28442cc8927d9d6c0ceb5fa9770fc9f7da3022731ea9d5c4b732f71ed19dfbdc7d7d987491a7b36f9f860244077dd921f1758cb3b5d2f0b8c726e2bd9b77bd196cc0c7bd6c629a4589cc76e969b88aa71b3ff0eb2cdb27f13e6523644f796c1de74ad71b48b865a40cc158af05fbf55c21acf1d24c21bbdf793d1d6351669d223419002b2848062e50d66495172636f6ca1ef19c038bdbd47bf44ffd79c2d8bdb46b8c68870ca126c467841522d49b2c2df280c3d9c8a57aef5a26a3a33705c1663c72540f9b21c35965829834fb7588459f9981d8e2d5084c69f9ec651bc4404181888e78a8e0f1809b1b03c7b4558734c2eba1976d868ffce6a711c81f2a76c9437e1751f1bb99e542b7057d1c1a1e073943f11c98a792198282a5d08ea3c22acc4d5cb8af615c6d4f9f59af2ec4201b34d35835ee1648881eb259e6bce3e86d3ffb42be3379c8ec4bf2ba184b218a9f969f2fb48b18463fe6aa4ea7d6a50743747d394c1efb76ab1169c6deaaeb1d3c9740ebb05d877d598837476a17c73b0d201c5ddc075e7cf71751379ebeec99bbdabc10c0fc8998d5a9b0cb682d654bc247c9965b2832d28fc02c6fb2f3a36d6ad04d4f602b2974b9192b7cad5c51d0be970e0b9dff423e424c090b50bbfd386ec5d3c9c73bedbc2fcb666228e0182c9b70c4f24dbb36b354f1b5ba1e6ed9ddde2010f19a2e0171effda1c07f2696d3d7467f7253f20fab0b33555820c08908a4f3295d73a7bb8b2ef7091552725f00fb7d775482f47824370395b3610f2a6bd1ad5188b7bb713e36ca0d417bda58bcdc8117c0f2089e1cc8ef1f90372c8603a02567062c10df65e0baefa805388659decc5f21ad41f725319f90214e71de7f4765e79bd311e3a2a9a2304b64da77689ac51be29363bd16f36bcc4eb53339b8b099e3c230ccc01593e9c4ecbf4bc8496a739828735b3203654c931a73f2c4707bb322f67173297147b3346be92f119aa831eb95f7d5df264611b8317892a8737db0695a3d49cecb7b6faf6a61edde21516ef0fc01cd5a3e8284508d886fd6d24b9d0cd88e298fa2b794ef2f8ce72c9e495a8897fe3b54d5e97402c4951a42c4d6681a594b096cfef521d6f89f3691ef35275738e8957b14f0a19f3e00c7fa949094ff403767fcb48e30fffadf254f6bfd5a3bca31a8acf1d941cdd505d1619d8fb822af2e88988b036ff0e7bf61934f571e3cb8f7d7aab4a8a7c05cb41f468d8312bd7bca54e400b7b43560aff234094b84b2a04b347e40e248fbef6a28fa929d6e2d41c0b9ac4535b5c5a2fb991b96e8abdc91f5ba85ac519693ed27e0c667eff9935ca39ba171fa0f8b3af1290a07e4f8ec7f056ce9d492b17a1316d43c4e31f92dabe37f4338be8d5912593fddb5a38a0e35518bb6c5d2cc974e194e779a0c1d8fc1f89b563fd8435fc8aaedab992a05336800c0fc1f62d404a2233054876e8699f8c317b01def14e0a020e6eb015be473a8489d37bf3b0e3d27b48c6ef0b508e11e64c6519ad06703c81e28f4960565974cfb7e1b51b633fb0e69b9031d9c0e4bd5f8432a9cef7b124cfb9cb538e3ff3a86912e2393be68c821a8386a4842707ba060b352c9bba1bd12cf132041fafa77406032792b145d77a66fda5e05a69d1d7a5bbc72b50aff8a77b9b2e5d713b52f2f5a5ec6752455460cdf71acbbcc5fa1f8b2d5107667314e9915be3aa5243f2b30ae9ab0d3019a30d9acdf98416dcc94bf90e91f9376c2fceeed9e3cc7035ddbb11fa09646a48acc0e4582e88e5f875c3f0221915abfa7b94689e197d20da435f31d3aaecb8c7b6dd3bb7f5e274c5cfbb4db3a3243d2a74fedc134dafcc95a2c91cea24df62f97466942c96a68b1c53ea0e21758a31eea78af0592bdc06fb604f2ebcf04e41f30e48c27e50b3033123e25668b10d2e6956387f586474c6814a63a014d190400f24fb7674e518ba0fe4875800e2d28c5956157583a27af6fa9a95445dbc8537b4aefcddab9b7c0d6fa4abea86cf6f75c044846dbbf465b6fe2674f1308be5c06d8d490492b50658f46644da7e2e9d9e5253cf57e72b0f3d9f918a9d05d89b91e378df2b86c3bbdc7d1bae58582ab689746fad0cbe0d8e3c6206cdff41f2a01ec72a25717e820da25309fac6abbe5dc0c6a2db7a76129d12a3c2951e987cdf2f14394e127505977cba", 0x1000, 0x3}, {&(0x7f00000014c0)="b17a66efcb587331038cc0121c50ec4f55cba56c20d731ce5e706100111dafc8378b9af99108f0df2cffa902ca8ed3b7fb62891ed8d2cc9ddef77fd8e41feed377ef99f79c38e2535667a3ee6629a73b6fb3786b84a1db5d3021d6951c15af818f192609e424fbd7014a69102b7cd5836f2cd15e3c72adca850b80e2aa76698ba7f030de6cf5fcd267e37362", 0x8c, 0x3}, {&(0x7f0000001580)="1ffdeccd269bbb85f824d95adc71925d02cfe543464c9cd057bdb86a832ad46d53dd8bb037445a9795d332", 0x2b, 0xff}, {&(0x7f00000015c0)="6b83f222b17febdbfb60eed6abb29f68f80d39ac89c76c434f176ea6c19fdbf348f545ff9fb31311a2142770d29542ce620dc34dc2709fe35243fecaa9f61f57db6f6d1af844f91be330be1534e9506f50fb4f86cfa31688587e23b97e4fed4866ac1a815b0a7687f774f870f3281aede955efefcb1ce039cd328fcb273855f3a6e13e295383d0d7b58a542b51ec7eaca82312b557918a67d2af6e908bb9336d7100f93dc0bafc77a8f6f5ae53a08bb0172beb588a85b6adc42af91d2a8a1879a82ad43a3cd2f8b85d9af0b3af2e1ff82ef54939dc13d96a5429ecf0838372b34f70fe", 0xe3, 0x323}, {&(0x7f00000016c0)="e8e8a0532ad3f4d0398f44c3d9404af1f55782aad1da9ef45158692805aa92506cda9953102edca881ef609b40e45c919f1755671e822adc14ac2cb1dd60733876a634e8ae391f7dce51b163f5e47e57fea57f6ef39760539b0c31c6cb232a516db1fbd5f61dc67322fb838f52ddcbd441778dd157c94ec7c243344f83a49437005c909b6fa6e02d1967364e9a5073e606c52d90abea0e8848fb0f4e0680a2412cd0d2adb6efd7153e4d5d8830f043f7a960b0b034e424d1a87ed9bc9d54dab063ea02cbe161fa4fde6ac4af3490ee3f5c", 0xd1, 0x4}], 0x2c001, &(0x7f0000001880)={[{@gid={'gid', 0x3d, 0xee01}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x35]}}}}, {@huge_never}, {@huge_within_size}, {@gid={'gid', 0x3d, r1}}, {@huge_advise}, {@huge_advise}, {@huge_within_size}, {@size={'size', 0x3d, [0x67, 0x30, 0x78, 0x39, 0x30]}}], [{@subj_role}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '}+\''}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '^$+\\@]'}}]}) 23:13:11 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:13:11 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) 23:13:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:13:12 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, 0x0) shmctl$SHM_LOCK(r1, 0xb) 23:13:12 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:13:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setregid(r1, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) mount$9p_fd(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x400, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_9p2000}, {@posixacl}, {@nodevmap}, {@noextend}], [{@appraise_type}, {@seclabel}, {@appraise_type}]}}) 23:13:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r3, 0x10, r2, 0x2) 23:13:12 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:13:12 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x44, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:13:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setregid(r0, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:13:12 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:13:12 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 23:13:12 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:13:12 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:13:12 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:13:12 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:13:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r3, 0x10, r2, 0x2) 23:13:12 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) 23:13:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r3, 0x10, r2, 0x2) 23:13:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:13:25 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:13:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:13:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:13:25 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x3d, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:13:25 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:13:25 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) close(r0) 23:13:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:13:25 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:13:25 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:13:25 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) close(r0) 23:13:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:13:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {0x0}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e0000000000", 0x1b, 0x10000}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/123, 0x7b, 0x20000}, {0x0}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="15d4df6ee5416660e2196aa7a80410fb1f916c3430c25b009f4861c0c1f3565046d8cf0f8f3e2c56a96bd97ac82bfcca8e18139316b9ef98dab63365ba8a0d63d4812c0f6e69da130130abe7231983f61d458dc13b62054827ab76dcfac28e5c1a7bd046a5a041fe46b85c0989d5be0def8e2ff380991d03e34ac6"]) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:13:25 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:13:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:13:38 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:13:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:13:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:13:38 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:13:38 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) close(r0) 23:13:38 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:13:38 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:13:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:13:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:13:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:13:50 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:13:50 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:13:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:13:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:13:50 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:13:50 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:13:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:13:50 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r4, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:13:50 executing program 6: rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:13:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:14:05 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:14:05 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 23:14:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:14:05 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:14:05 executing program 6: rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:14:05 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:14:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:14:05 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:14:05 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(0x0, 0xb) 23:14:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:14:05 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:14:05 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:14:05 executing program 6: rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:14:05 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(0x0, 0xb) 23:14:05 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:14:05 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:14:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:14:05 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(0x0, 0xb) 23:14:18 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:14:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:14:18 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r0, 0x407, 0x6) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:14:18 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x7, 0x6d, 0x0, 0xffffffffffffffff, 0x0, 0xffe0}) shmctl$SHM_LOCK(r1, 0xb) 23:14:18 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r4, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:14:18 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:14:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:14:18 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:14:18 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:14:18 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:14:18 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:14:18 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:14:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r3, 0x10, r2, 0x2) 23:14:18 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r0, 0x407, 0x6) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:14:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:14:18 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:14:18 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:14:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r3, 0x10, r2, 0x2) 23:14:31 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:14:31 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r0, 0x407, 0x6) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:14:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:14:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:14:31 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:14:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:14:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:14:31 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:14:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:14:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:14:31 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:14:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:14:31 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:14:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:14:31 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:14:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:14:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:14:45 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:14:45 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:14:45 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:14:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:14:45 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:14:45 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:14:45 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:14:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:14:45 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:14:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:14:45 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:14:45 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:14:45 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:14:45 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:14:59 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:14:59 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:14:59 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:14:59 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) 23:14:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:14:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:14:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:14:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:14:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:14:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:14:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:15:00 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) 23:15:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:15:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:15:00 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:15:00 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:15:00 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:15:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:15:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:15:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:15:14 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:15:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:15:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:15:14 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:15:14 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:15:14 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) 23:15:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:15:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:15:28 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:15:28 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) 23:15:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:15:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:15:28 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:15:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:15:28 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:15:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x8) 23:15:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:15:28 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:15:28 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:15:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000540), 0x0) 23:15:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = dup(0xffffffffffffffff) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r5, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r5, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:15:29 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:15:29 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:15:29 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:15:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:15:29 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:15:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:15:29 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:15:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000540), 0x0) 23:15:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:15:29 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:15:29 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) close(r0) 23:15:43 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:15:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = dup(0xffffffffffffffff) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r5, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r5, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:15:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:15:43 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:15:43 executing program 4: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:15:43 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:15:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 23:15:43 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) close(r0) 23:15:44 executing program 4: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:15:44 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:16:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:16:02 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:16:02 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:16:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 23:16:02 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:16:02 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) close(r0) 23:16:02 executing program 4: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:16:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = dup(0xffffffffffffffff) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r5, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r5, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:16:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:16:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 23:16:02 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:16:02 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:16:02 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:02 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:16:02 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:16:02 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) close(r0) 23:16:02 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:16:16 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:16:16 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:16:16 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:16 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:16 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:16:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:16:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r1 = getpgrp(0xffffffffffffffff) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r1}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x1, 0x0) openat(r0, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r5, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r4, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:16:16 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:16:16 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r1 = getpgrp(0xffffffffffffffff) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r1}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x1, 0x0) openat(r0, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r5, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r4, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:16:16 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:16:16 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:16:16 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:16 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:16:29 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:16:29 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r4, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:16:29 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:16:29 executing program 0: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r6, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 23:16:29 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:16:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r1 = getpgrp(0xffffffffffffffff) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r1}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x1, 0x0) openat(r0, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r5, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r4, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:16:29 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:16:29 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:29 executing program 0: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, 0x0, 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:16:29 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:16:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:16:43 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:43 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:16:43 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:16:43 executing program 0: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r5, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r5, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:16:43 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) 23:16:43 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, 0x0, 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:16:43 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) 23:16:43 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:43 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, 0x0, 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:16:43 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) 23:16:43 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:16:43 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:43 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:16:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r5, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r5, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:16:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:16:59 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:16:59 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:16:59 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 23:16:59 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:16:59 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:16:59 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:59 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:16:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:16:59 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:59 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x8000000) 23:16:59 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:16:59 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:17:12 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:12 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:17:12 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r4, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:17:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:17:12 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:17:12 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:17:12 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:13 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:17:13 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:17:13 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:13 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:17:13 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:17:13 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:17:13 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) close(r0) 23:17:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:17:26 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:17:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:17:26 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:26 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:26 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:17:26 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) close(r0) 23:17:26 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:17:27 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:17:27 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:17:27 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400a00, 0x15d) close(r0) 23:17:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:17:27 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:27 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:17:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:17:27 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:17:27 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:27 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:17:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:17:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:17:40 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:17:40 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:40 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) syz_io_uring_setup(0x6e51, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:40 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:17:40 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:17:40 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:40 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:17:40 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:17:40 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:40 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="8f93c57c270ae503aa70b526674b6017608fc6", 0x13}], 0x1, &(0x7f0000000400)=[{0x98, 0x104, 0xd41, "40e6c9399edde75fc116dc5d1d9beeec34c9c0097fe7957127cda72fcd73fa5c741407f890900048169a6349abb9d9dd03c6d52a2f8b759af506a58a308b366d0cea0cd2e83d376df43ffd12de10cbf119b2ff6fe1770b064ed3cad343c6605f0592ee0e4e3f3fc05884e121e4a8dcfb70eca618beae97f21ac216d44e1922208bfd465975ec"}, {0x18, 0x6, 0x8, "fb"}, {0xc0, 0x115, 0x2, "cae91b7dbeb5ed2e4e02c8f0eb11241bda473a102bbf2fbce75abf3b797cb97b33f4475312f0aa3d7359248a8783271dbdae54a90e4fdc1e180c5d5f10c6a468779cb7b2eb1cc45a37a6099cf5cbea24f2673fc78ad9cc855e52eb499493444e8ed9ac8459c4db41eb06ea359eca0bc94730c15248cc078155a214682a2d655aa439cebfc3e8bfade74a630b45b51faa3b1d68a5b76fc0b4c450f705a71e9ff1919bdc0cd352df1274d8"}, {0x88, 0x6, 0x9, "aae6c373698c96a3102c7364d682674178420385e5b85049afb67ee5abef4baa888760deff55c50aa85783a64b9a74e3d0dc8b320d2d82c831fc1b5048b8d601bc1812d2f3db83619ab757badce9dfac18b7e8c059283ec748a6f2d407c5bf128ae1ef46a45fc749b6bfff9aa808658fd3770a"}, {0x28, 0x10b, 0x8, "22bf8867f3792d72db3484a53002f4c03212c007"}, {0xf0, 0x101, 0x0, "e525ddc50409435ac3d6346debe44d9f1507f838e5aeea86e52294096ca8f6f3e33afd2010a10423899d8452a76ee668bb8541f2049187735eafafa9bf4fbebe7caf304d365e691b18db7a9062de665f20becbb02d21de7aa6b86fc0ac2b0f6a0009f22ba35ff8813116516a6fdc7053db40d5d986b491affd114673f6652708d1817271537642020c04cc4ec1717c5daeb21ee9a71f9d8f596f8f550e2042bbcc51057352e796b1b56298a21dbe38a2a680d4ee440da724e5bb3112f056dab56a99edb4d0c5cab758a1d03345161b70c517ce261f181dd0fe95e49e"}, {0x30, 0x10d, 0x9f, "23c9e1a0763e586ec7f62e45e014653ad3a35e8a7938208dc1b8f9e814bb"}, {0xe0, 0x118, 0x3ff, "405a84b9f672a9c69f2559fd0868795c410964a5dea66e40e1cf83e9617127d7825132004b4196e3c10fd92b95042569daea01536da68b6b0c0fb986f427351867e2385323c452bfe517852dc88a5187fd923b06ed64d9f8a4b95540705df9d9b67684683a396d3801860839e73a9b0b02282252bb12059f26af9e23ca81ac0a5032343b35efea5768d89376912799cb1bc4a017df5254a96795fd2cbf344c682e1147a4c6a9268e100d6660256ab87a7f48982ad11a8e7151d4231cc93e8cec002e2d12c94f9c10f119e3fb94001b"}, {0x108, 0x197, 0x3, "2b504caad2725aa8b77fcd2f02f827382dae26bf25318fda6aaa98a600cba3d82312fb37154dc621696d8f52e566a93c16088de8db19fda31081c2d1dddcb0ead977c30464dbdb09864a970ab8267a79b4721845b40a2d89c4587b9af287dbc4605548b8227163d94c13de6beb7cade69a872cd1fbd3cddd924ac0e341258dd3866d0210614b345397f6f9c618898bc4d7f18ba8f4eea2a2c0ddfe06b9a9c61ac1b549e6fe5ce14731dd5786909e564ecb65e8cab6fad6b1e5647c48e57f92850ac36a14c00c96bf3e3e94d1703f25f8c077f87fe9d6b300aa8d5406fc2adace2cd5e5483a4a259ac0fe5d54a56f15d65469"}], 0x528}, 0x0, 0x20000091}, 0x8cf) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:55 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:17:55 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:17:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:17:55 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:17:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:17:55 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:55 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:55 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:17:55 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:17:55 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, 0x0, 0x0, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:17:55 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:17:55 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:17:55 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:17:55 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, 0x0, 0x0, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:17:55 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r4, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:17:55 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:18:10 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:18:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:18:10 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:18:10 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:10 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:18:10 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, 0x0, 0x0, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:18:10 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:18:10 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:10 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640), 0x0, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:18:10 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:10 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:10 executing program 4: syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:18:10 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:18:10 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:10 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:18:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:18:27 executing program 4: syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:18:27 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:18:27 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640), 0x0, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:18:27 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:27 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:18:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640), 0x0, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:18:27 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:27 executing program 4: syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:18:27 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:27 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:18:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:18:28 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:18:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{0x0}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:18:28 executing program 3: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:28 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:18:28 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:18:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{0x0}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:18:42 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:18:42 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:18:42 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:18:42 executing program 3: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:42 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{0x0}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:18:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:18:56 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:18:56 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:56 executing program 3: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:56 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:18:56 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:18:56 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:18:56 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:18:56 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:56 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:56 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:18:56 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:18:56 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:56 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:56 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:56 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:18:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:18:57 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:18:57 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:18:57 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:10 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:19:10 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:10 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:10 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:10 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:19:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:19:10 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:19:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:19:10 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:19:10 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:19:10 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:10 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:10 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:19:10 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:10 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:19:10 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:19:11 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:11 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:11 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:24 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:19:24 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:19:24 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:19:24 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:24 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(0x0, 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:19:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:19:24 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:19:24 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:38 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:19:38 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:19:38 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 23:19:38 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:19:38 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:19:38 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(0x0, 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:19:38 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 23:19:38 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:19:38 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(0x0, 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:19:38 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:38 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 23:19:38 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:19:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:19:38 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x0) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:19:52 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:19:52 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:19:52 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:19:52 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x0) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:19:52 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:52 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:19:52 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:52 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:52 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:52 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x0) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:19:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:19:52 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:19:53 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:19:53 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:20:08 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:08 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:20:08 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:20:08 executing program 6: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:08 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:08 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:20:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:20:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:20:08 executing program 6: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:20:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, 0x0, 0x0, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:20:08 executing program 6: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:08 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:08 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:20:22 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, 0x0, 0x0, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:20:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:20:22 executing program 1: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:22 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:22 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:22 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:22 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:20:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:20:22 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, 0x0, 0x0, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:20:22 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:22 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:22 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:22 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300), 0x0, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:20:22 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:20:22 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:36 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:20:36 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300), 0x0, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:20:36 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:20:36 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:36 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:36 executing program 1: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r4, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:20:36 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300), 0x0, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:20:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:20:36 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:20:36 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:36 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:36 executing program 1: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:36 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:20:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{0x0}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:20:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r4, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:20:36 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:36 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:20:49 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:20:49 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:49 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:20:49 executing program 1: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{0x0}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:20:49 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:20:49 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{0x0}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:20:49 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:49 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:20:49 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:21:01 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:21:01 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 23:21:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:21:01 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:21:01 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) (fail_nth: 1) 23:21:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:21:01 executing program 1: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 23:21:01 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) [ 1007.131968] FAULT_INJECTION: forcing a failure. [ 1007.131968] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1007.133128] CPU: 1 PID: 6871 Comm: syz-executor.4 Not tainted 6.0.0-rc1-next-20220822 #1 [ 1007.133930] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1521 [ 1007.134758] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 6871, name: syz-executor.4 [ 1007.135553] preempt_count: 0, expected: 0 [ 1007.135952] RCU nest depth: 0, expected: 0 [ 1007.136354] no locks held by syz-executor.4/6871. [ 1007.136811] irq event stamp: 994 [ 1007.137137] hardirqs last enabled at (993): [] __up_console_sem+0x78/0x80 [ 1007.137962] hardirqs last disabled at (994): [] dump_stack_lvl+0x2e/0xb3 [ 1007.138740] softirqs last enabled at (982): [] __irq_exit_rcu+0x11b/0x180 [ 1007.139514] softirqs last disabled at (955): [] __irq_exit_rcu+0x11b/0x180 [ 1007.140629] CPU: 1 PID: 6871 Comm: syz-executor.4 Not tainted 6.0.0-rc1-next-20220822 #1 [ 1007.147046] syz-executor.4[6871] cmdline: /syz-executor.4 exec [ 1007.148054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.148983] Call Trace: [ 1007.149245] [ 1007.149425] dump_stack_lvl+0x8b/0xb3 [ 1007.149800] __might_resched.cold+0x222/0x26b [ 1007.150217] down_read_killable+0x75/0x490 [ 1007.150629] ? down_read_interruptible+0x490/0x490 [ 1007.151074] __access_remote_vm+0xac/0x6f0 [ 1007.151434] ? follow_phys+0x2c0/0x2c0 [ 1007.151800] ? do_raw_spin_lock+0x121/0x260 [ 1007.152204] ? rwlock_bug.part.0+0x90/0x90 [ 1007.152589] ? lock_release+0x3b2/0x750 [ 1007.152980] ? __up_console_sem+0x47/0x80 [ 1007.153317] get_mm_cmdline.part.0+0x214/0x600 [ 1007.153763] ? dname_to_vma_addr.isra.0+0x360/0x360 [ 1007.154192] ? _raw_spin_unlock_irqrestore+0x33/0x60 [ 1007.154693] get_task_cmdline_kernel+0x1e9/0x230 [ 1007.155098] dump_stack_print_cmdline.part.0+0x82/0x150 [ 1007.155576] ? _atomic_dec_and_lock_irqsave+0x150/0x150 [ 1007.156041] ? __wake_up_klogd.part.0+0xc5/0xf0 [ 1007.156437] ? dump_stack_print_info+0xc6/0x190 [ 1007.156889] dump_stack_print_info+0x185/0x190 [ 1007.157286] dump_stack_lvl+0x7f/0xb3 [ 1007.157651] should_fail.cold+0x5/0xa [ 1007.158008] _copy_from_user+0x2a/0x170 [ 1007.158318] copy_clone_args_from_user+0x147/0x790 [ 1007.158787] ? lock_is_held_type+0xd7/0x130 [ 1007.159164] ? sighand_ctor+0x40/0x40 [ 1007.159480] ? lock_release+0x3b2/0x750 [ 1007.159921] ? ksys_write+0x214/0x250 [ 1007.160223] ? lock_downgrade+0x6d0/0x6d0 [ 1007.160797] ? lock_is_held_type+0xd7/0x130 [ 1007.161150] __do_sys_clone3+0x8f/0x2e0 [ 1007.161465] ? __ia32_sys_clone+0x150/0x150 [ 1007.161918] ? bit_wait_io_timeout+0x170/0x170 [ 1007.162294] ? fput+0x2b/0x190 [ 1007.162651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.163080] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.163486] do_syscall_64+0x3b/0x90 [ 1007.163876] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1007.164305] RIP: 0033:0x7f6eb52c9b19 [ 1007.164650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.166089] RSP: 002b:00007f6eb283f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1007.166794] RAX: ffffffffffffffda RBX: 00007f6eb53dcf60 RCX: 00007f6eb52c9b19 [ 1007.167406] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020004c00 [ 1007.167998] RBP: 00007f6eb283f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.168618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.169199] R13: 00007ffc51e0dd7f R14: 00007f6eb283f300 R15: 0000000000022000 [ 1007.169872] [ 1007.225662] FAULT_INJECTION: forcing a failure. [ 1007.225662] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1007.243906] syz-executor.4[6871] cmdline: /syz-executor.4 exec [ 1007.244393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.245272] Call Trace: [ 1007.245562] [ 1007.245785] dump_stack_lvl+0x8b/0xb3 [ 1007.246082] should_fail.cold+0x5/0xa [ 1007.246372] _copy_from_user+0x2a/0x170 [ 1007.246747] copy_clone_args_from_user+0x147/0x790 [ 1007.247191] ? lock_is_held_type+0xd7/0x130 [ 1007.247575] ? sighand_ctor+0x40/0x40 [ 1007.247932] ? lock_release+0x3b2/0x750 [ 1007.248234] ? ksys_write+0x214/0x250 [ 1007.248589] ? lock_downgrade+0x6d0/0x6d0 [ 1007.248962] ? lock_is_held_type+0xd7/0x130 [ 1007.249285] __do_sys_clone3+0x8f/0x2e0 [ 1007.249649] ? __ia32_sys_clone+0x150/0x150 [ 1007.250037] ? bit_wait_io_timeout+0x170/0x170 [ 1007.250395] ? fput+0x2b/0x190 [ 1007.250738] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.251152] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.251623] do_syscall_64+0x3b/0x90 [ 1007.251949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1007.252334] RIP: 0033:0x7f6eb52c9b19 [ 1007.252665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.254131] RSP: 002b:00007f6eb283f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1007.254729] RAX: ffffffffffffffda RBX: 00007f6eb53dcf60 RCX: 00007f6eb52c9b19 [ 1007.255311] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020004c00 [ 1007.255872] RBP: 00007f6eb283f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.256443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.257009] R13: 00007ffc51e0dd7f R14: 00007f6eb283f300 R15: 0000000000022000 [ 1007.257674] [ 1007.257859] CPU: 0 PID: 6883 Comm: syz-executor.0 Tainted: G W 6.0.0-rc1-next-20220822 #1 23:21:01 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:21:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:21:01 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:21:01 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:21:01 executing program 1: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) [ 1007.387718] syz-executor.0[6883] cmdline: /syz-executor.0 exec [ 1007.388802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.390456] Call Trace: [ 1007.390877] [ 1007.391227] dump_stack_lvl+0x8b/0xb3 [ 1007.391854] should_fail.cold+0x5/0xa [ 1007.392434] _copy_to_user+0x2a/0x140 [ 1007.393052] simple_read_from_buffer+0xcc/0x160 [ 1007.393803] proc_fail_nth_read+0x198/0x230 [ 1007.394450] ? proc_tid_comm_permission+0x1c0/0x1c0 [ 1007.395252] ? security_file_permission+0xb1/0xe0 [ 1007.396025] vfs_read+0x253/0x930 [ 1007.396603] ? proc_tid_comm_permission+0x1c0/0x1c0 [ 1007.397344] ? kernel_read+0x1c0/0x1c0 [ 1007.397978] ? __fget_files+0x270/0x450 [ 1007.398644] ksys_read+0x127/0x250 [ 1007.399195] ? __ia32_sys_pwrite64+0x220/0x220 [ 1007.399924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.400723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.401516] do_syscall_64+0x3b/0x90 [ 1007.402092] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1007.402906] RIP: 0033:0x7f7d1fb0f69c [ 1007.403481] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1007.406129] RSP: 002b:00007f7d1d0d2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1007.407286] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7d1fb0f69c [ 1007.408355] RDX: 000000000000000f RSI: 00007f7d1d0d21e0 RDI: 0000000000000006 [ 1007.409420] RBP: 00007f7d1d0d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.410480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.411570] R13: 00007ffe073b727f R14: 00007f7d1d0d2300 R15: 0000000000022000 [ 1007.412667] 23:21:01 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:21:01 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:21:01 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 23:21:02 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:21:02 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:21:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r2, 0x407, 0x6) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}}}}, 0xf8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x0, 0x20, 0x40, 0x0, 0x9, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7eb6, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4400, 0x7, 0x8000, 0x9, 0x100000001, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x4}, r4, 0x10, r3, 0x2) 23:21:02 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') getsockname$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32], 0x220) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) 23:21:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_setup(0x6769, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) close(r0) 23:21:02 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146", 0x22}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x5, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x309}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x2000, 0x175, 0x17}, 0x18) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x10040, 0x24) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 23:21:02 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) fcntl$setpipe(r1, 0x407, 0x6) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) VM DIAGNOSIS: 23:21:01 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff8880171eb600 RCX=ffffffff8129542f RDX=1ffffffff0d95a5e RSI=0000000000000002 RDI=ffffffff84203f88 RBP=ffffffff84203f88 RSP=ffff88800eaff460 R8 =0000000000000001 R9 =ffffffff86ca67d7 R10=fffffbfff0d94cfa R11=0000000000000001 R12=0000000000000001 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88807ffdc500 RIP=ffffffff841e36d3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555e17400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f70f4102718 CR3=000000002020e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 6a6e695f31313230 385f7a7973006273 YMM02=0000000000000000 0000000000000000 0000000000000000 00ffffffff000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8240d2d1 RDI=ffffffff8762d960 RBP=ffffffff8762d920 RSP=ffff888042af71f8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff8762d920 R14=0000000000000010 R15=ffffffff8240d2c0 RIP=ffffffff8240d329 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6eb283f700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020004c00 CR3=000000001da58000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000