{0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:51:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:51:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_L}]}}) [ 756.487175] cgroup: fork rejected by pids controller in /syz6 01:52:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:13 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_L}]}}) 01:52:13 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:52:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}]}}) 01:52:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:52:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:52:13 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:52:13 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:52:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}]}}) 01:52:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:13 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:52:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:52:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:52:28 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:52:28 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:52:28 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_L}]}}) 01:52:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:52:28 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) keyctl$chown(0x4, 0x0, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:52:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:28 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 787.451542] 9pnet_fd: Insufficient options for proto=fd 01:52:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:52:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:28 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:28 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) keyctl$chown(0x4, 0x0, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) [ 787.729233] 9pnet_fd: Insufficient options for proto=fd 01:52:28 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:52:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) (fail_nth: 1) 01:52:44 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) keyctl$chown(0x4, 0x0, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:52:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 1) 01:52:44 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:52:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:44 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:52:44 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:52:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 2) 01:52:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) [ 803.598520] 9pnet_fd: Insufficient options for proto=fd 01:52:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:44 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:52:44 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) [ 803.757661] cgroup: fork rejected by pids controller in /syz7 01:52:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:45 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:52:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 3) 01:52:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:52:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:52:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) (fail_nth: 1) 01:52:45 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:52:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) [ 804.160417] FAULT_INJECTION: forcing a failure. [ 804.160417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.162160] CPU: 0 PID: 7681 Comm: syz-executor.7 Not tainted 6.1.0-rc8-next-20221208 #1 [ 804.163191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 804.164224] Call Trace: [ 804.164580] [ 804.164900] dump_stack_lvl+0x8f/0xb7 [ 804.165421] should_fail_ex.cold+0x5/0xa [ 804.165996] _copy_from_user+0x30/0x1f0 [ 804.166555] memdup_user+0x72/0xd0 [ 804.167071] strndup_user+0x78/0xe0 [ 804.167579] __x64_sys_mount+0x137/0x310 [ 804.168133] ? __pfx___x64_sys_mount+0x10/0x10 [ 804.168769] ? syscall_enter_from_user_mode+0x21/0x50 [ 804.169452] ? syscall_enter_from_user_mode+0x21/0x50 [ 804.170164] do_syscall_64+0x3f/0x90 [ 804.170668] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 804.171366] RIP: 0033:0x7f6d39975b19 [ 804.171870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 804.174125] RSP: 002b:00007f6d36eeb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 804.175113] RAX: ffffffffffffffda RBX: 00007f6d39a88f60 RCX: 00007f6d39975b19 [ 804.176026] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 804.176935] RBP: 00007f6d36eeb1d0 R08: 0000000020000240 R09: 0000000000000000 [ 804.177851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.178788] R13: 00007ffd509965cf R14: 00007f6d36eeb300 R15: 0000000000022000 [ 804.179776] [ 804.228628] FAULT_INJECTION: forcing a failure. [ 804.228628] name failslab, interval 1, probability 0, space 0, times 0 [ 804.230402] CPU: 0 PID: 7777 Comm: syz-executor.1 Not tainted 6.1.0-rc8-next-20221208 #1 [ 804.231422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 804.232450] Call Trace: [ 804.232788] [ 804.233098] dump_stack_lvl+0x8f/0xb7 [ 804.233613] should_fail_ex.cold+0x5/0xa [ 804.234178] should_failslab+0x9/0x20 [ 804.234689] __kmem_cache_alloc_node+0x5b/0x400 [ 804.235317] ? __iomap_dio_rw+0x22b/0x1bd0 [ 804.235872] ? perf_trace_lock+0xf0/0x560 [ 804.236433] kmalloc_trace+0x26/0x60 [ 804.236934] __iomap_dio_rw+0x22b/0x1bd0 [ 804.237504] ? __pfx___lock_acquire+0x10/0x10 [ 804.238093] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 804.238793] ? __pfx___iomap_dio_rw+0x10/0x10 [ 804.239483] ? down_read+0x1a0/0x450 [ 804.239996] iomap_dio_rw+0x40/0xa0 [ 804.240502] ext4_file_read_iter+0x2f4/0x4a0 [ 804.241113] vfs_read+0x712/0x9f0 [ 804.241603] ? __pfx_vfs_read+0x10/0x10 [ 804.242159] ? __fget_files+0x270/0x450 [ 804.242729] ksys_read+0x12b/0x260 [ 804.243230] ? __pfx_ksys_read+0x10/0x10 [ 804.243775] ? syscall_enter_from_user_mode+0x21/0x50 [ 804.244437] ? syscall_enter_from_user_mode+0x21/0x50 [ 804.245127] do_syscall_64+0x3f/0x90 [ 804.245636] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 804.246297] RIP: 0033:0x7f0ffe455b19 [ 804.246783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 804.249009] RSP: 002b:00007f0ffb9cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 804.249960] RAX: ffffffffffffffda RBX: 00007f0ffe568f60 RCX: 00007f0ffe455b19 [ 804.250860] RDX: 0000000000000008 RSI: 0000000020001780 RDI: 0000000000000003 [ 804.251740] RBP: 00007f0ffb9cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 804.252616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.253489] R13: 00007ffee8c842bf R14: 00007f0ffb9cb300 R15: 0000000000022000 [ 804.254407] 01:53:00 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:53:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) (fail_nth: 2) 01:53:00 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:53:00 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:53:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:53:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:17 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:53:17 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:53:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:17 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:53:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:53:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) (fail_nth: 3) [ 836.018240] FAULT_INJECTION: forcing a failure. [ 836.018240] name failslab, interval 1, probability 0, space 0, times 0 [ 836.020156] CPU: 1 PID: 7938 Comm: syz-executor.1 Not tainted 6.1.0-rc8-next-20221208 #1 [ 836.021152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.022145] Call Trace: [ 836.022485] [ 836.022786] dump_stack_lvl+0x8f/0xb7 [ 836.023297] should_fail_ex.cold+0x5/0xa [ 836.023840] ? ext4_init_io_end+0x27/0x180 [ 836.024394] should_failslab+0x9/0x20 [ 836.024894] kmem_cache_alloc+0x5a/0x410 [ 836.025441] ext4_init_io_end+0x27/0x180 [ 836.025967] ext4_writepages+0xc84/0x36c0 [ 836.026518] ? __is_insn_slot_addr+0x126/0x250 [ 836.027115] ? perf_trace_lock+0xf0/0x560 [ 836.027682] ? __lock_acquire+0x164d/0x5e70 [ 836.028258] ? __pfx_ext4_writepages+0x10/0x10 [ 836.028864] ? __pfx_lock_release+0x10/0x10 [ 836.029450] ? lock_is_held_type+0xdb/0x130 [ 836.030016] ? find_held_lock+0x2c/0x110 [ 836.030553] ? lock_release+0x3b6/0x750 [ 836.031075] ? do_writepages+0x51b/0x6a0 [ 836.031623] ? __pfx_lock_release+0x10/0x10 [ 836.032189] ? do_raw_spin_lock+0x125/0x270 [ 836.032761] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 836.033389] ? __pfx_ext4_writepages+0x10/0x10 [ 836.033965] do_writepages+0x1b4/0x6a0 [ 836.034481] ? __pfx_do_writepages+0x10/0x10 [ 836.035044] ? lock_release+0x3b6/0x750 [ 836.035573] ? wbc_attach_and_unlock_inode+0x44d/0x8d0 [ 836.036254] ? __pfx_lock_release+0x10/0x10 [ 836.036815] ? __pfx_lock_release+0x10/0x10 [ 836.037370] ? __pfx_lock_acquire+0x10/0x10 [ 836.037926] ? __iomap_dio_rw+0x22b/0x1bd0 [ 836.038481] ? ext4_file_read_iter+0x2f4/0x4a0 [ 836.039096] ? do_raw_spin_unlock+0x53/0x220 [ 836.039708] ? _raw_spin_unlock+0x28/0x50 [ 836.040246] ? wbc_attach_and_unlock_inode+0x4a3/0x8d0 [ 836.040935] filemap_fdatawrite_wbc+0x14b/0x1b0 [ 836.041533] ? lock_release+0x3b6/0x750 [ 836.042055] __filemap_fdatawrite_range+0xba/0x100 [ 836.042688] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 836.043403] ? mark_held_locks+0x9e/0xe0 [ 836.043959] ? lock_is_held_type+0xdb/0x130 [ 836.044538] filemap_write_and_wait_range+0xa5/0x130 [ 836.045197] __iomap_dio_rw+0x5ea/0x1bd0 [ 836.045751] ? __pfx___lock_acquire+0x10/0x10 [ 836.046339] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 836.047026] ? __pfx___iomap_dio_rw+0x10/0x10 [ 836.047713] ? down_read+0x1a0/0x450 [ 836.048215] iomap_dio_rw+0x40/0xa0 [ 836.048713] ext4_file_read_iter+0x2f4/0x4a0 [ 836.049303] vfs_read+0x712/0x9f0 [ 836.049780] ? __pfx_vfs_read+0x10/0x10 [ 836.050323] ? __fget_files+0x270/0x450 [ 836.050869] ksys_read+0x12b/0x260 [ 836.051353] ? __pfx_ksys_read+0x10/0x10 [ 836.051891] ? syscall_enter_from_user_mode+0x21/0x50 [ 836.052539] ? syscall_enter_from_user_mode+0x21/0x50 [ 836.053200] do_syscall_64+0x3f/0x90 [ 836.053683] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 836.054327] RIP: 0033:0x7f0ffe455b19 [ 836.054799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.056988] RSP: 002b:00007f0ffb9cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 836.057917] RAX: ffffffffffffffda RBX: 00007f0ffe568f60 RCX: 00007f0ffe455b19 [ 836.058797] RDX: 0000000000000008 RSI: 0000000020001780 RDI: 0000000000000003 [ 836.059673] RBP: 00007f0ffb9cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.060562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.061432] R13: 00007ffee8c842bf R14: 00007f0ffb9cb300 R15: 0000000000022000 [ 836.062338] 01:53:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:17 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:53:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) (fail_nth: 4) 01:53:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:17 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:53:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:17 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:53:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xb, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:53:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xb, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:17 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:53:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) (fail_nth: 5) 01:53:17 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) [ 836.884921] FAULT_INJECTION: forcing a failure. [ 836.884921] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 836.886855] CPU: 0 PID: 8331 Comm: syz-executor.1 Not tainted 6.1.0-rc8-next-20221208 #1 [ 836.887879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.888881] Call Trace: [ 836.889227] [ 836.889531] dump_stack_lvl+0x8f/0xb7 [ 836.890036] should_fail_ex.cold+0x5/0xa [ 836.890595] prepare_alloc_pages+0x178/0x500 [ 836.891178] ? perf_trace_lock+0xf0/0x560 [ 836.891759] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 836.892452] __alloc_pages+0x149/0x500 [ 836.892987] ? __pfx___alloc_pages+0x10/0x10 [ 836.893573] ? __lock_acquire+0xbad/0x5e70 [ 836.894151] ? mark_lock.part.0+0xef/0x2f70 [ 836.894733] vma_alloc_folio+0xe2/0x480 [ 836.895271] __handle_mm_fault+0x1025/0x3640 [ 836.895865] ? lock_is_held_type+0xdb/0x130 [ 836.896447] ? __pfx___handle_mm_fault+0x10/0x10 [ 836.897124] ? handle_mm_fault+0x43d/0xae0 [ 836.897708] handle_mm_fault+0x2ce/0xae0 [ 836.898267] do_user_addr_fault+0x53a/0x1300 [ 836.898892] exc_page_fault+0x9c/0x1a0 [ 836.899441] asm_exc_page_fault+0x26/0x30 [ 836.899981] RIP: 0010:clear_user_original+0x10/0x50 [ 836.900638] Code: 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 c8 48 c1 e9 03 74 14 0f 1f 40 00 <48> c7 07 00 00 00 00 48 8d 7f 08 48 ff c9 75 f0 83 e0 07 74 0a c6 [ 836.902880] RSP: 0018:ffff88804c3af900 EFLAGS: 00050212 [ 836.903614] RAX: 0000000000000008 RBX: ffff88804c3afdb0 RCX: 0000000000000001 [ 836.904516] RDX: 0000000000040000 RSI: ffffffff82125403 RDI: 0000000020001780 [ 836.905412] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 836.906284] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000020001780 [ 836.907175] R13: 0000000020001780 R14: 0000000000000008 R15: 0000000000000000 [ 836.908097] ? iov_iter_zero+0x313/0x15e0 [ 836.908658] iov_iter_zero+0x323/0x15e0 [ 836.909190] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 836.909817] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 836.910535] ? mark_held_locks+0x9e/0xe0 [ 836.911076] ? __pfx_iov_iter_zero+0x10/0x10 [ 836.911678] ? lock_is_held_type+0xdb/0x130 [ 836.912265] ? rcu_read_lock_sched_held+0x42/0x80 [ 836.912901] ? iomap_iter+0x5e1/0x1260 [ 836.913414] ? filemap_check_errors+0xa9/0x160 [ 836.914021] __iomap_dio_rw+0xfca/0x1bd0 [ 836.914584] ? __pfx___lock_acquire+0x10/0x10 [ 836.915176] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 836.915873] ? __pfx___iomap_dio_rw+0x10/0x10 [ 836.916547] ? down_read+0x1a0/0x450 [ 836.917062] iomap_dio_rw+0x40/0xa0 [ 836.917570] ext4_file_read_iter+0x2f4/0x4a0 [ 836.918179] vfs_read+0x712/0x9f0 [ 836.918661] ? __pfx_vfs_read+0x10/0x10 [ 836.919233] ? __fget_files+0x270/0x450 [ 836.919797] ksys_read+0x12b/0x260 [ 836.920294] ? __pfx_ksys_read+0x10/0x10 [ 836.920843] ? syscall_enter_from_user_mode+0x21/0x50 [ 836.921517] ? syscall_enter_from_user_mode+0x21/0x50 [ 836.922181] do_syscall_64+0x3f/0x90 [ 836.922693] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 836.923348] RIP: 0033:0x7f0ffe455b19 [ 836.923825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.926053] RSP: 002b:00007f0ffb9cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 836.926999] RAX: ffffffffffffffda RBX: 00007f0ffe568f60 RCX: 00007f0ffe455b19 [ 836.927896] RDX: 0000000000000008 RSI: 0000000020001780 RDI: 0000000000000003 [ 836.928799] RBP: 00007f0ffb9cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.929704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.930595] R13: 00007ffee8c842bf R14: 00007f0ffb9cb300 R15: 0000000000022000 [ 836.931547] 01:53:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:53:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x10, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) (fail_nth: 6) 01:53:34 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:53:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:53:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 01:53:34 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x17e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:34 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:53:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xc, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:53:34 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) [ 853.757005] FAULT_INJECTION: forcing a failure. [ 853.757005] name failslab, interval 1, probability 0, space 0, times 0 [ 853.758103] CPU: 0 PID: 8526 Comm: syz-executor.1 Not tainted 6.1.0-rc8-next-20221208 #1 [ 853.758610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 853.759112] Call Trace: [ 853.759283] [ 853.759446] dump_stack_lvl+0x8f/0xb7 [ 853.759710] should_fail_ex.cold+0x5/0xa [ 853.759987] ? jbd2__journal_start+0x194/0x8d0 [ 853.760291] should_failslab+0x9/0x20 [ 853.760550] kmem_cache_alloc+0x5a/0x410 [ 853.760814] ? lock_is_held_type+0xdb/0x130 [ 853.761106] jbd2__journal_start+0x194/0x8d0 [ 853.761406] __ext4_journal_start_sb+0x4a5/0x6b0 [ 853.761714] ? ext4_dirty_inode+0xa5/0x130 [ 853.761997] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 853.762300] ext4_dirty_inode+0xa5/0x130 [ 853.762570] __mark_inode_dirty+0x1aa/0xe70 [ 853.762865] touch_atime+0x648/0x700 [ 853.763115] ? __pfx_touch_atime+0x10/0x10 [ 853.763421] ext4_file_read_iter+0x36c/0x4a0 [ 853.763730] vfs_read+0x712/0x9f0 [ 853.763975] ? __pfx_vfs_read+0x10/0x10 [ 853.764254] ? __fget_files+0x270/0x450 [ 853.764540] ksys_read+0x12b/0x260 [ 853.764791] ? __pfx_ksys_read+0x10/0x10 [ 853.765067] ? syscall_enter_from_user_mode+0x21/0x50 [ 853.765397] ? syscall_enter_from_user_mode+0x21/0x50 [ 853.765734] do_syscall_64+0x3f/0x90 [ 853.765983] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 853.766319] RIP: 0033:0x7f0ffe455b19 [ 853.766563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 853.767665] RSP: 002b:00007f0ffb9cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 853.768138] RAX: ffffffffffffffda RBX: 00007f0ffe568f60 RCX: 00007f0ffe455b19 [ 853.768580] RDX: 0000000000000008 RSI: 0000000020001780 RDI: 0000000000000003 [ 853.769022] RBP: 00007f0ffb9cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 853.769465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.769902] R13: 00007ffee8c842bf R14: 00007f0ffb9cb300 R15: 0000000000022000 [ 853.770365] 01:53:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 01:53:49 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x553, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:49 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:53:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) (fail_nth: 7) 01:53:49 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:53:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x10, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:53:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 01:53:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:53:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) (fail_nth: 8) 01:53:49 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:53:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) [ 868.403210] FAULT_INJECTION: forcing a failure. [ 868.403210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.404248] CPU: 0 PID: 8838 Comm: syz-executor.1 Not tainted 6.1.0-rc8-next-20221208 #1 [ 868.404770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 868.405285] Call Trace: [ 868.405463] [ 868.405623] dump_stack_lvl+0x8f/0xb7 [ 868.405891] should_fail_ex.cold+0x5/0xa [ 868.406191] _copy_to_user+0x30/0x1c0 [ 868.406474] simple_read_from_buffer+0xd0/0x170 [ 868.406805] proc_fail_nth_read+0x19c/0x230 [ 868.407104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 868.407432] ? security_file_permission+0xb5/0xe0 [ 868.407788] vfs_read+0x2e1/0x9f0 [ 868.408045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 868.408368] ? __pfx_vfs_read+0x10/0x10 [ 868.408656] ? __fget_files+0x270/0x450 [ 868.408954] ksys_read+0x12b/0x260 [ 868.409217] ? __pfx_ksys_read+0x10/0x10 [ 868.409511] ? syscall_enter_from_user_mode+0x21/0x50 [ 868.409852] ? syscall_enter_from_user_mode+0x21/0x50 [ 868.410204] do_syscall_64+0x3f/0x90 [ 868.410465] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 868.410811] RIP: 0033:0x7f0ffe40869c [ 868.411061] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 868.412196] RSP: 002b:00007f0ffb9cb170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 868.412686] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f0ffe40869c [ 868.413151] RDX: 000000000000000f RSI: 00007f0ffb9cb1e0 RDI: 0000000000000005 [ 868.413606] RBP: 00007f0ffb9cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 868.414054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.414505] R13: 00007ffee8c842bf R14: 00007f0ffb9cb300 R15: 0000000000022000 [ 868.414975] 01:53:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:53:49 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:53:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 01:53:49 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) [ 868.601463] 9pnet_fd: Insufficient options for proto=fd 01:53:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:54:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x4) 01:54:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:54:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:07 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x14, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:54:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x900, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:07 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:54:07 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:54:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) [ 886.607879] 9pnet_fd: Insufficient options for proto=fd 01:54:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0xf) 01:54:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:54:07 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x112, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:54:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:54:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0xfdef) [ 886.913848] 9pnet_fd: Insufficient options for proto=fd 01:54:24 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:54:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8000016) 01:54:24 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x300, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:54:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:54:24 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:54:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xb00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x1020, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:24 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) [ 903.280821] 9pnet_fd: Insufficient options for proto=fd 01:54:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:24 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x326, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:54:24 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:54:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) [ 903.481968] 9pnet_fd: Insufficient options for proto=fd 01:54:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:54:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 01:54:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0xfffffdef) 01:54:40 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:54:40 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x500, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:54:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2010, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:40 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xb, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:54:40 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:54:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:40 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) [ 919.057448] 9pnet_fd: Insufficient options for proto=fd 01:54:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}]}}) 01:54:40 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x10, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:54:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 01:54:40 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:54:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5305, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:40 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:54:40 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x300, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:54:40 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x600, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:54:57 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}]}}) 01:54:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 01:54:57 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:54:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x7ffffffff000) 01:54:57 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6992, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x500, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:54:57 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:54:57 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:54:57 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:54:57 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}]}}) 01:54:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:57 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6a92, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:54:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x58a, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:54:57 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:54:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0xfffffffffffffdef) 01:54:57 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x88b, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 936.908898] 9pnet_fd: Insufficient options for proto=fd 01:54:57 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:54:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_L}]}}) 01:54:58 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x600, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) [ 937.106697] cgroup: fork rejected by pids controller in /syz3 01:55:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_L}]}}) 01:55:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:55:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:55:15 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:55:15 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:55:15 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6b92, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:55:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x900, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:55:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xd042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) [ 954.387738] 9pnet_fd: Insufficient options for proto=fd 01:55:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:55:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_L}]}}) 01:55:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 954.569919] 9pnet_fd: Insufficient options for proto=fd 01:55:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:55:15 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) [ 954.705903] 9pnet_fd: Insufficient options for proto=fd 01:55:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6c92, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:55:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fadvise64(r0, 0xbac5, 0xfae, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 01:55:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:55:31 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x900, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:55:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:55:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa49, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:55:31 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:55:31 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_init1(0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) [ 970.602666] 9pnet_fd: Insufficient options for proto=fd 01:55:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:55:31 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:55:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6d92, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) [ 970.800019] 9pnet_fd: Insufficient options for proto=fd 01:55:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xb00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:55:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) dup2(r1, r0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 01:55:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:55:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}]}}) 01:55:31 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:55:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}]}}) 01:55:32 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:55:32 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:55:32 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xc00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:55:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='coredump_filter\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = syz_io_uring_setup(0x302b, &(0x7f0000000600)={0x0, 0x8145, 0x1, 0x0, 0x19c, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) sendmsg$unix(r0, &(0x7f0000000780)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000200)="8dea5ce4486807a126980824eb69c816192d1b53719d33f609439dd4b86ab2be47f33812c78b5ce0dd231a335a81f3e4f8e3d720f91793de5d9162a429e144733260bb70a0716deb84c7ff5d67ce01c7e7e7abdf655a08b48237bbd6b5724d419df27ebe2248474c5b46d8db789f76b65b210a6a43b1963851020f69ec5d6e85af28700b711d69c0442fe059d0b11b24a0ce2f777ce19b73f5ca33cda6cf5e520ddbb17c", 0xa4}, {&(0x7f00000000c0)}, {&(0x7f00000002c0)="9e39a42ead7c882b2561737927af41c30cd041d8d972b42f2a9fbf08fc1db9c07d923084e65dc3bedd806c898e731ebdb78afab6772af1fb4bd1b02f9da9ac0d51279d1bcf5fc41d9701977360b16833c3fd897ce30ccd3cb5efde63eea72069ed9c67e29e458b965bc5c6d308990229615b32", 0x73}, {&(0x7f0000000340)="6ffaa9f6956fd4296e2badf2991504066ad1cfa56de88e12ab0817b4d733c984aeb6cfa118df08d0da72458f305125d65b1dcf707888fb30c1f0a284cb65ef7a84971cbf8fb8ba35cd26a432e21885162b7b743cca758cf86e85a0d705d75a15b5ae5453d51bc5a0d169647dba3c", 0x6e}, {&(0x7f00000003c0)="011f17", 0x3}, {&(0x7f0000000400)="7573b49fc0f9ac575ace4b08ed24c68b42b4cd45a3056eaf0629c672e2e73f22a5a0f5a3547dc804d69a3da79fa384e3", 0x30}, {&(0x7f0000000440)="f53747a1d9518751de55295663eae91533a87a7552bd9dcde30b092f80", 0x1d}, {&(0x7f0000000480)="cdf00310369b95de787da7ca950acb1a239590cf77c18fef77a9bdb1d302ad3fe61cd0d52a9fde190410da916e08f0e1700a8c796f89928b8cd26ff96065f2c8482a8ab6eb2acb31b6b5277d616f467c372957dcfa7cfc472ebc5da0c68b71fb5892e7006b98abffc34e1c5d08f6f5b8bf371fc0f5b2c0b70217d8802921c9c9158eee947c08a89fea8d5dc3afc4786afb5c9d94d6cc0a638d3cc72755691c89b8fb58f9bc52", 0xa6}], 0x8, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r5, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r7, 0xffffffffffffffff, r0, r8]}}], 0x80, 0x80}, 0x40000) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r10, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) fstat(r0, &(0x7f0000000000)) read$rfkill(r0, &(0x7f0000001780), 0x8) 01:55:52 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:55:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6e92, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:55:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}]}}) 01:55:52 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x1020, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:55:52 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_init1(0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:55:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r2, r4, 0x0, 0x7) pwritev(r1, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 01:55:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:55:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa0a, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:55:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6f92, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:55:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_L}]}}) 01:55:52 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:56:09 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x1201, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:56:09 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) renameat(r0, &(0x7f0000000040)='./file1/file0\x00', r3, &(0x7f00000000c0)='./file1\x00') openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) read$rfkill(r2, &(0x7f0000000000), 0xfffffffffffffd2b) 01:56:09 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x7e01, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:56:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_L}]}}) 01:56:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_init1(0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:56:09 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:56:09 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xb00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:56:09 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:56:09 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8084, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:56:09 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:56:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_L}]}}) 01:56:09 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x1020, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:56:09 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x1400, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:56:10 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:56:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40041, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) fsetxattr$security_evm(r2, &(0x7f0000000040), &(0x7f00000000c0)=@md5={0x1, "ed25a31225128221d4b2af8432b746d0"}, 0x11, 0x2) 01:56:10 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:56:28 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:56:28 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:56:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) 01:56:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x10df, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:56:28 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:56:28 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9269, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:56:28 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:56:28 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:56:29 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:56:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x926a, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:56:29 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:56:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2010, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:56:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:56:29 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:56:29 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:56:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x926b, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:56:46 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:56:46 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:56:46 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:56:46 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x926c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:56:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r3, r2, 0xee00) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0xee01}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file1\x00'}) r7 = getgid() r8 = getgid() r9 = getgid() setresgid(r7, r8, r9) r10 = getgid() r11 = getgid() r12 = getgid() setresgid(r10, r11, r12) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x1}, {0x2, 0x3, r2}, {0x2, 0x1, r4}, {0x2, 0x1, r5}], {0x4, 0x4}, [{0x8, 0x4}, {0x8, 0x4, r6}, {0x8, 0x0, r8}, {0x8, 0x1, r12}], {0x10, 0x1}, {0x20, 0x1}}, 0x64, 0x2) read$rfkill(r0, &(0x7f0000001780), 0x8) 01:56:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2603, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:56:46 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:56:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2010, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:56:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 01:56:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3f00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:56:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3193, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:56:46 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:56:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x926d, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:56:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x605802, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) close(r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000), 0x62}], 0x1, 0x7fffffc, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) fcntl$notify(r4, 0x402, 0x1) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) read$rfkill(r0, &(0x7f0000001780), 0x8) recvmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000140), 0x6e, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/162, 0xa2}, {&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000600)=""/164, 0xa4}, {&(0x7f00000000c0)=""/12, 0xc}], 0x4, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}, 0x2000) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r2) 01:57:05 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:57:05 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3293, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:57:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = fsmount(r0, 0x1, 0xf) renameat2(r2, &(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x3) name_to_handle_at(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@reiserfs_6={0x18, 0x6, {0x0, 0x2, 0x7e, 0xff, 0xfffffffc}}, &(0x7f00000000c0), 0x1400) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000000180), 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) 01:57:05 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:57:05 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:57:05 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:57:05 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x926e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:57:05 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:57:05 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x926f, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:57:05 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:57:06 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:57:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:57:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x68e1c1, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x8, 0x3, &(0x7f0000001400)=[{&(0x7f0000000280)="647f36cf9c2082a70e26d3c41836e1325233bb270f7899b271e0414cb0ba56a7746bc9a85797106ecbe30c33767143f61a8c43c79efe8158f6d57eb459b730d56a5982927c22d765edc35c9b1b5791e20063b8c7f1", 0x55, 0x1d8}, {&(0x7f0000000300)="03e5bcd65bce40b7c791fc149e8928e30852ebba1c2419d344f0b4f6297c2316d1513208ccf0c552779957fec8c30b1843896a9fb28e84c104725e53624644b136a4cb47cdc491d2406548393e4c533e105fdf9a17896c92254b89045ac56033f8ead28e917ddd9e817c3000f8a6430588d5b9f978657a6fb51bbdbf4cf72db05ca5ffcbc4efa60c4e3ca58bffe4cd9ceaac89b07f54b9fc21fa9425b81cf3ce7d8ef304729268a2f5f9795a75262a375b329af21c640e6e9baa68dec71ad970feeb15b2e8738f165018b97497e07b02740797c5ab5850d21232c9803da5cc868434977d6a79cd9731992b0d82ec729e8ed2c4c86383bdd9afd8e9115b7fcddf7c496390c48943a971a32fd7bb060822138d04d96605c1088a8ff87700ca75f0d5d04e28f9232c9fcc3a09c6aa2066e646fa27cb2cbd00541ea1155b9623a9e973fb0e43388cdab3df0b9afd90a683b27906aa23e7d1dd620609b9197c9f680e39ae2afb9afba72d85eee9f1d2f17afe067e22e056ccac1b5f3e5c53eb9fb566b1f09494da04e0e17760512d1ae24aeb65293d300d8b7bd20acf5f1f19af523b223d5b5ee7fec3df191137d6745089959bc02b0daf0bbdefdb9e7d2e421c66dd4d292ceac69263daa9e542d8580affb68a62fad0c3a1066fab0be83d1ef9a50be73925514fd3d531aaed843a2379bfb08f410b91154a19e5655f12b54296f2c7020d099365840564e8d5abad2a9261ff31b0058ba03c23f51a51e47b87755daf967f57ad31fe1530d36e9b2ced710e6c0a611315c7f8a58495a2b9be1f62503c519f7cb9474e956642e2fdb177eeb58ce9d7b4d534bda33ff432f9e364df7a879835dd06f22789a5f3031d58a3a582716125694620b3ceeb1d39e4136df6074b4f3887eed11c1e24b4b63c2417f6b8f8f01b8f46225ec6e453d5b3b3745e94808f31700bf59f5ebb3852099e6b6cee639b01d773e85490e82aa315929bd583827f6e4ebc8a8da93e6c0b9f76d48522eeb30623a44f400218f666a58ecf86bb5b5b892ebfbf6aad54ac5196e721ec9690b770e9a5a508cff62c3e133c5716483c3f82467d237eec0fdfdeb988dc6cce4efa9dff26f874f2a10f50b473c703025feb4662edff2f53740dd4c67c5b0378d2b72e44020582d128639cefd8d1baf893a0a2df7e8e948fd71ec1b03caa9100de0f1568df3c0428443e2cf3583144cd31d64d67785f776614e22309b5ea6c018d159d0f440bb42f1434ec7b1e2219955742af4e636a4c529b2627ff8f33d4dd4d457703b4acd1713dc5ca12d348c1e02cf4fe5ec8d3fd11a6f0edd34459f7110d873a5457dcd30164c4f16c863dd47a2711c6fd716e8f8116d71494e88316d48a01a24fa58937a9097dc85f8b158aecd3df479afda92f2179784793bf701a71218599ba3c4a3a3cb7240b70b0977427b9cd13cfd1a368e8e9086415888de1ace4fc6a8ff689e16ec7ae5d0cfba5424a1b772687c6b95b4f9b8751290d7dc6b98dc2e517258e059ffe7ff611e476010e5f0bdc7f94d6dbb47b16e7d71252906b87d5ab33f5c8a87af4363177f3d39d5903ec19a9ce634268101ae9da1deb9344fee1dbd907b5826c8166c79f902b471c980d6c4a404321e50382d018698f3185a0b956c4155b10d1e83ee0e51ff184102eedc2304b034137b41fc27b89c1fd4dca03a8d39385773c06d8ead13724d47eaa436540477f6678f568e2490f2bbf45dc4c7a0c1e243c7b9e4fbb2701de8a6124c3889020c2a85b5dc0baed7682ce83dcef6e8ebd5c7014754f2cfb081e059a0152f5a4afdba8f6740a2da9db1c85d8c3bba486b8253450138c1ef6b15e10632c524b271a843320dad34dd3e181c731fd229acbd606bb7345012cdff89339221517f1a5d6903c594b4f16dd33d00d91c6d0f581249ca6d2e0ba29242e299acdaa0a1b295773b4b759d3f0ba545fa1eb54a0eb3fa24256e37861cf5ca121eef32f4543c9d83708f67a552c43fa93a319d3c7516f50c31449489f72a9e92387c4264299d453aaeae8f0a9ee1c90b1f1631f4455a16d4f2b8576e0131badce8e2e24186b21320aec8b1f2ae1a0bba42662934752a94cfbaf7aade1e3006c28c117888b9add776b77d8a1c64f4b5bd6bbd8a79bc63d3cf234e52128d28d363763fa77db4e3761ba6d160562227155ff3012223ba74d8182dd0dbb6676b4e7af97ace989b915f447a64a2727210679c7329a65cea2f1b0512d3c9da332d9e96b6d9b1045bd9774052834ec8d95ec5013055ba8afd12def11cdf47e57c0c675a8f8c65fd9a0c6258d858fda44cfb1b10fd57eca159a12b238e27c65b6e0eb5f96aabd627a27b2f9fd92f16ac98adcda68da7bb6155c6958ded60775706711bafca20325b047e5462b778f5f307684fb7a8e0f99d2758e9cfb25df1e2221e1ef2d0af44f39ed2305afb83ba05fba310741128c1000f272d6b4776ef2e6c971cb03c0bf6f009293ec6de0b2fd7df94c909dae61d0de50b038883d5f1682ab6e3cdfe6eac569cb12407e2ae805e4a45c4e33852dfe20aee2bcd8f774eef03459952a7edb55877beecde7fbd2769daf86dfa6f573f96496d73a31c2459ae34f23e50428565dee5fc2b459ac8bfc5791a85bb7ee4a8b7fd47bf4e41a9d8319899e0b55ad06ae9d538008980741feac019ce3fa80bc82036058eb59dd981cf83a800fc27302d1163cb496e659bc4fb38ac26d26c7a8dffc45fdb8b471d7f397a98370148bf092a7ba33f9943722578c4e9ae1c78d68d31a316c82ecfd574a8955a5ad9647391ab5fbcc0251b37eb30edc754191185f943b788f665b93319c6fbc5c52f53442d254c9cbaadfabf2c31e2ac4056e1c9486c06fe35601b729526f26e3701762d4a369b2a35b23702d09049f3c1f2e42062e1b0a39616b04a0c91800512add62a9466941e1eca964169ecf90effebc8c1222a831c7ea7c61a9b3599e1cafa1bd7eff94420e43b109640be92eaaf9a1ddcff2242b9cb4e83eceb3cee5c7dfbeb26625dab6363562fb1f00a68ade9d3c68cf4156ead403e6a6c3a87560e84c7aa76a463b1954a092a405bf3dffb447415dd9d17308ed06c322f660818c732edac2d8ed9d94ba03e0e95d658983f996756f339f63d4aa45c688b67a1852c342da8eed4274e157f9077bd89b193a06b58315124eb4c7ae05e4cd193593fa3c0ceb4e7bd9bced728df84dfdfa274c97c52d70ea572fbd21a981e721632a30e4c0a7714244cda6b50ece911759c8f3225dfe26fba619f84f9e80038e502ae68e6a2a22923f1c3e10e81aa6a400844907923d6a73a938db1896641757fd68415bf2be7bfb12b53b1e35ca2f5e26ada62eb95d028e5c4f447b9680101fe6b7586b8adf8ba238be366b1adfd144b2572a33fb65ecb086d4bc720f2dd6e90f340020081c17be57bd45b8bbfeb81d6058fb3f8e41eea1cedc12538662d83ee80f60e5b97098bbc73036bc46b34e1e4ef12ae82b1c254d57c218889f1d7e6d76ee278e4f437c1dd1f3e4dd434d0886627bb435bec29610f0a2cccdb1d7a098d0d69a4ac92886e6288a695d945ea11dccbf566763d3932e771fb9a626fed04194a4aabdab501e03921162b7b6e1a33eadb1c512ac4e10455d763a28a20c25dba0af6ea1b8a53741b1a2e6faa052ffb69d2ca027208389b7cdb8aca56c7b4b4313bce09bfcc7803cc7730485f74157db76272c47ca0f5202bc8298921fecf481cd4d9016461c31a6f70ef2a09e06ae1a2486f37899cce6b9bd43f798d71e7f9b5cb2a955105e0e3219c8b5a91c734375b99f23fedc942e3a6688842f341da86b77ff74abe14cbfed3511eb56058fc7e32817b95986963f8ae0f2cceba5858102ed33b90aa7dd834a270df84dea9a3d7e1301ccc5cab813bd73bcc7e8c3e910b1fcc26300b0652ddd4b0af76c5f55dc60d5d08be28b2701575a30786f21b655029f5933844225ac81cb0cdabc86105c35ca189d40331a84be6667bba87e3e971d56ff7508ec3a3b52ba3ecd33301ee4c1f5dbb52325cdb785f57850ebde6d6b354a9868ac136efe6373ba2a399eb979466a5f53a6c86db1d76b8494ad06de62ba06a60bedee3c5297d06238a760b0044e4ac170ed156d17d8bfef5d9120a295fe450a145ea3bc5e26d5fc54dfb37ec27f1fa6b93b937ad1b86bf5e04c0e33cb40ddfbfb16bd579041efa2a6bafa647bce181d2d2e08e3da1c3d7a8c81d615afae9b8182433911397848175ee7ca77c933591867b46f938e0a1fe480077bc1834cb21421d5e1e1766a7ab87483e67c077109f802f2429e07fbb95e5e7dcf3794c56f35b5445224e2c98890edbe2370d5a4f3c9425ea167730343e39579da057dd223f2a7ed84af3856b14b45fff586c5f9980a3534cb834a2cf5860b7e0ad1b6b5978f257f4cacb4e0105fd6e54a808b38f5a000cb80a69d76832d6051386efb0eea141cfff7e77044e9ce3c4a8faa1d106ccbb8b73bff81af0d0a8bdab3858ca4fdb86329934caec97aa5eafee41f58322be53235e12d732cde82a2c05bffc1d63c0042b60313b7992b6f7bd88e650f41680a42c5250f594cc48834c6a6eee5491ca934734a3a89d22a2f1a2a878530d3348ffa1b101fcbf7bc40b03505491226e5026d77137ec6a7d2d58d9d7bbf363decd612fd6a101cddf3ffe8a9a08ee87e707da3e33e018c3c0ca4b4630d971bbddc298f3bdb91afc2bb557b9244a472c2d7add4e93c24b29b113b318013178391d3f0b772a6986cac12793308e80637c1bcfc0be59af8609637ecf36bd4e6318b852371b1a64e040e1188cff89ca0822a92282442f12c2768835eeae76294a3c52688554f197ca5d7aba576ba8927c8740fe2d3a4f276513ceddb3dbcf897478180b3dc89f74ad2a342cb91c96c4f55a3cb949145a4e091e7e709bb407ad4452c3690a60b24b5eb221ec01d82b7f11f15e773f7310177a729affc2f9477ab3c300b8d9649e0611349c288c13acc1c8375de49ed9dd76f45a1f4101f63b3c8c931cc9f3e01f2e536329db3219bd046ff1438e7eccf54fa520b7f9ab9e20d1c5d009b9eabacc7191ec9b699268b79bc45b63e5f6cc84d140af8da1a3c45090dd7ccda3e61437cca2ed27f9243ac41976436a5f5c599531c03e76586fc1a85ef7740babeee4d84a1f31af4956ac3a268aca1c13b67c3d589178c9efe46f268714476f4d486c6aa64306b4b18d7c4ecdf67c6b7ce76daff52d25623f0a46c404e20617f44169f283ca347c3f959488daf4ddf11a5322836ab2be20318b0db49f7874a44cb5f12ec41561515485af3af75e33041538f9df295f9d4f15a0bac2dd4018ce19f2b33308327b4333bd7e319034f3ae86fb629968e2b8deead86a55a254faf5a107ececb4b9b242396d07b63759e06310f564115a97e61a1198baf00e087681f7aad12dfad471694b36160d1f2667aa9cf12f5e651ec49f9d1c4ad10a9907a45397a7de8190bc6388a4f418f1b34bdce48b675c1437201a70c2fbe6b78d5510cb8f230a96ffaf6e74d2f9da96d6de8be5da22d4f10de00bfa9f9775bbe2688ca51774255844bd3e119918b96db341b23c8bdc2ea5cff42a67d98ebdc70713bb76f401c726cfee4cf56f98d727810dd5d8a29b19788d3da33b6642e2fbf3ad2028256d9763ab93c6bd2114d7ccc211a72690d513e14a9d973ff30bd88523b0ab896a3a919976da579681494d3f548106eb5441daa82bf159071f7d07b6185cfedc4f9ad7468326d598076f2f5afc91b43ec5623af5c33832d", 0x1000, 0xda}, {&(0x7f0000001300)="1a7af600cc9c21bf9b42a020f56fdb17abae8a86d7f713c347d80b0e2271084019f357f99aafd1ba0c91ca941e6ec433d652ec2ebb00d658ee030a594d015d0d49a85af7750fb4c8a700056b8d0d38f987462bfc7b7991a1303cb9076e0986690969466dd9959ae5347234a17464e7371ac457607d26ed1e5f9b996ea70e5a850b3a8d182e7ed4ea29da8340a617307c0893387553636acc717f7de9b9ca9b4cd7ad528ba2c76f9e7a0796db61fc0d69462c628ec7583bb2c57abec04215eef92fb8b56f7ff5f24bc41c9cef19f3d82e70a2fbebed90951d", 0xd8, 0xfffffffffffffff9}], 0x80008, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x40) openat(r3, &(0x7f0000000040)='./file1\x00', 0x280, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000001500), 0x80002, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) syncfs(r4) r6 = signalfd4(r0, &(0x7f00000000c0)={[0x100]}, 0x8, 0x80800) openat(r6, &(0x7f00000001c0)='./file1\x00', 0x800, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r7, &(0x7f0000000140)=[{&(0x7f0000001540)="d9c171c4928bd00e14d9d27fb9fa46326fefb49656d8ef9efcb20d9e4e120cf24d568c5d29", 0x25}, {&(0x7f0000001480)="19620732602392d4811226661bab9e70b788cb3d9539a66e971f24803cc86079e6b53173f18575e318c8e3ebc27c335a0b38938059a38ae87220b8364b6822aa31bd6d928428c532fdf6493ef34f88f0f8a1a7d0ebd683aca4b1d124e1a455d96202bc9e545a476a", 0x68}, {&(0x7f00000017c0)="b4ee89f2eea179120bf9895135dd1bb5c6d9f7539db510726d6d975e671dceed5852a64bace547c5ce44164addb5ddd3192ef664a817270269b69ff44ef72e71b5e2b1accd2f36046a12f2ef096b3bcae9b1e15c3c02850c4fd5499409448cd6c8592f8499c1d0613bdb374f19cd3bb6008d5a6b52e5d33d21cde615da6444be1bbd69011ff8914f2de67bc382f530341f95ce1834d2e791", 0x98}], 0x3, 0x6, 0x400) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) readahead(r1, 0x0, 0x9169) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r8, 0xf505, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 01:57:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3393, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:57:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x490a, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:57:06 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:57:06 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:57:06 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:57:06 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:57:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x80000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:57:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8084, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:57:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:57:23 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:57:23 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:57:23 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:57:23 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x818e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:57:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3493, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:57:23 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:57:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = open(&(0x7f0000000200)='./file1\x00', 0x41ee42, 0x336) fchmod(r1, 0x180) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000180)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = semget$private(0x0, 0x5, 0x0) semtimedop(r5, &(0x7f0000000100)=[{0x0, 0xfffb}], 0x1, 0x0) semop(r5, &(0x7f0000000080)=[{0x0, 0x7fff}], 0x1) semop(r5, &(0x7f00000001c0)=[{0x3, 0x1, 0x800}], 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000000)) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 01:57:23 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:57:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3593, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:57:23 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:57:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x4c) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000000c0)={'hsr0\x00'}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000180)) 01:57:41 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:57:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x828e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:57:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:57:41 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:57:41 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:57:41 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3693, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:57:41 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:57:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:57:41 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:57:41 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:57:41 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:57:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x838e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:57:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl(r1, 0x100, &(0x7f0000000000)="a9432361dc15a90b850e22c5fc299910f836c1eedc324722252c7e46b135a27cd1ea89fdbcd28ebba9da131aa9e03b3484eba35c0e1b") read$rfkill(r0, &(0x7f0000001780), 0x8) 01:57:41 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3793, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:57:41 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:57:41 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:57:59 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x848e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:57:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) (fail_nth: 1) 01:57:59 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(0xffffffffffffffff, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:57:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:57:59 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:57:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) (fail_nth: 1) 01:57:59 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3893, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:57:59 executing program 1: keyctl$chown(0x4, 0x0, 0x0, 0xee00) getgid() r0 = getgid() r1 = getgid() setresgid(0x0, r0, r0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f00000007c0)=0x1c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) socketpair(0x23, 0x800, 0x5, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000840)=0x0) r7 = getgid() r8 = getgid() r9 = getgid() setresgid(r7, r8, r9) sendmsg$netlink(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="340100002c0010002bbd7000fbdbdf255c002a805abd3661623b554f96a9a8488ea2c7a7f269d7ae5b3af5c39d235743782b3560673adc9371003be462d8cab18c6e971b837ca30e36d5e158ebc64fb2ad6dba75a28dbe3000e3bac4e9e577f67d01ebcf08004600", @ANYRES32=0x0, @ANYBLOB="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"], 0x134}, {&(0x7f0000000340)={0x10, 0x23, 0x400, 0x70bd2d, 0x25dfdbff}, 0x10}, {&(0x7f0000000600)={0x11c, 0x36, 0x40a, 0x70bd25, 0x25dfdbfc, "", [@generic="a88622a88f0291f5d9b391d2e3621bab6f3779de40d695bb63572719ec84caa62cc17759b1f1b5b868898847e935143149a58c9c783983e53b88f3b3", @generic="1b08833c64b741cde56ca418d233fc9d6c1a560d46c9f24df373e37e82576d003450d7eac749dcdefd1c0a6067d28dd78f75e1abb8061930b2afd3f276d64401bd7a7c553b3730968569c4b0bd76923e0dd3a54c6f0a82968368aa579d", @generic="1df8fdb80efd171da4d83179f806dd3142b75756c67f71df7ec0fa03c274efab5d422616988790384c4179c9ec0f6763122e2b4ab513617da7cf9ff00cbe2ee564170bbffd5497c0b017276fe989219fe29bd9b962329c380315ce1435b0a54bb4d38ee5a71406c4ed2891ed6d85552c67c831"]}, 0x11c}, {&(0x7f0000000740)={0x58, 0x33, 0x200, 0x70bd2a, 0x25dfdbff, "", [@generic="75b47cb2f3ae6afc05cf6a372bd50a6da4f976546a437043bec2c815c48a2144efd536bebdc2a48916abb83a6b0a6f09f963", @typed={0x14, 0x28, 0x0, 0x0, @ipv6=@remote}]}, 0x58}], 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32, @ANYRESHEX, @ANYBLOB="000000001c000020000009000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYRES64], 0x90, 0x90}, 0x14) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc442, 0x100) pwritev(r11, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r10, &(0x7f0000001780), 0x8) 01:57:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:57:59 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:57:59 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3993, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:57:59 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x858e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:57:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:57:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:57:59 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(0xffffffffffffffff, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:58:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) fallocate(r1, 0x21, 0x7f, 0x2) 01:58:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:58:00 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:58:00 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:58:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3a93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:58:00 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(0xffffffffffffffff, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:58:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:58:21 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3b93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:58:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x868e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:58:21 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r0, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:58:21 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:58:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x404943, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 01:58:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:58:21 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d3970323030302e4c2c76657273696f6e3d3970323030302e752c76657273696f6e3d397032303030454c2c00fd9fe993d7654b2fed7f10334ea8247da5dd2d8d6098d7a0900884f10d7a429a0499eb330cbdbb517533ef80448bc314d7ee0121bb0330f8a65393186fded1f4d396782d2c69a759307611fb865d299535c65fedb536b597879b9dd4916d7f74c6e8191a323c6da9121918b6040329a1ecb9c3d2036decd432b3893e4fca82be2edd4780f22cc063b90d7f"]) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4c1d, 0x0, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0xfffffd}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0}) r8 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r5}], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000500)={r5, r6, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000300)={r5, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055d40)={0xf74, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "0d87d5a6d3dd0a"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0}) r12 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r12, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000000500)={0x0, r11, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005f380)={0x2fb4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r11}], 0x20, "c7b4db39b9ef33"}) 01:58:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xb000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) [ 1141.013579] 9pnet: Unknown protocol version 9p2000EL 01:58:22 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:58:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:58:22 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3c93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:58:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) openat(0xffffffffffffff9c, 0xfffffffffffffffc, 0x42800, 0x85) read$rfkill(r0, &(0x7f0000001780), 0x8) 01:58:40 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x878e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:58:40 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:58:40 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r0, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:58:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x10000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:58:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e9738e22b53511a7b4e1ae704178cc599650037a8e0f67f289b8c22decf510b3e56c69d825de85afd842138e64e93666c16371fdb5faef564bdec5cf791c865e15cb84cc66b00ca61611629bc69fd62efa6099f3ba027a09fd05b41b68f42eadea91942a814e94d1a463680eabb6a63695e1f3419a27c90d03b05081f10d6167a2297b553d517", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) 01:58:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:58:40 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3d93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:58:40 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:58:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xb, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:58:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) openat(r2, &(0x7f0000000000)='./file1\x00', 0x30000, 0x8) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) fchown(r0, 0xee01, 0xee00) 01:58:41 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:58:41 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r0, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:58:41 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, 0x0, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:58:41 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302e4c2c76657273696f6e3d3970323030302e752c76657273696fdf3d3970323030302e4c2c00c4172fb2f9ac117a51a8f4e599646b49427e8ef8c052ac2570e10a26c6824db2d150"]) 01:58:41 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3e93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:58:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x888e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:58:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x10, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:58:41 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x20100000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:58:41 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, 0x0, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:58:59 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x898e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:58:59 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) read$rfkill(r2, &(0x7f0000001780), 0x8) 01:58:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x53050000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:58:59 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = geteuid() r5 = getpid() perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r5, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x5, 0x1c0c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x800000000000001, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x8, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r5, 0xe, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x81, 0x80, 0x3f, 0x0, 0x0, 0xffffffffffff7fff, 0x63a0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf1b3, 0x4, @perf_config_ext={0xffffffff80000001, 0x8}, 0x4000, 0x7, 0x8, 0x4, 0x100, 0x800, 0x7, 0x0, 0x1}, r5, 0x5, 0xffffffffffffffff, 0x8) getresuid(&(0x7f0000005940), &(0x7f0000005980)=0x0, &(0x7f00000059c0)) recvmmsg$unix(r3, &(0x7f000000eb40)=[{{&(0x7f0000005a00)=@abs, 0x6e, &(0x7f0000005c40)=[{&(0x7f0000005a80)=""/162, 0xa2}, {&(0x7f0000005b40)=""/226, 0xe2}], 0x2, &(0x7f0000005c80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005d00)=@abs, 0x6e, &(0x7f00000073c0)=[{&(0x7f0000005d80)=""/199, 0xc7}, {&(0x7f0000005e80)=""/74, 0x4a}, {&(0x7f0000005f00)=""/159, 0x9f}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/177, 0xb1}, {&(0x7f0000007080)=""/237, 0xed}, {&(0x7f0000007180)=""/244, 0xf4}, {&(0x7f0000007280)=""/50, 0x32}, {&(0x7f00000072c0)=""/192, 0xc0}, {&(0x7f0000007380)=""/54, 0x36}], 0xa, &(0x7f0000007480)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f00000078c0)=[{&(0x7f00000074c0)=""/228, 0xe4}, {&(0x7f00000075c0)=""/180, 0xb4}, {&(0x7f0000007680)}, {&(0x7f00000076c0)=""/250, 0xfa}, {&(0x7f00000077c0)=""/97, 0x61}, {&(0x7f0000007840)=""/77, 0x4d}], 0x6, &(0x7f0000007940)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000007a40)=@abs, 0x6e, &(0x7f0000008bc0)=[{&(0x7f0000007ac0)=""/163, 0xa3}, {&(0x7f0000007b80)=""/4096, 0x1000}, {&(0x7f0000008b80)=""/27, 0x1b}], 0x3, &(0x7f0000008c00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000008d00)=@abs, 0x6e, &(0x7f000000b0c0)=[{&(0x7f0000008d80)=""/118, 0x76}, {&(0x7f0000008e00)=""/86, 0x56}, {&(0x7f0000008e80)=""/223, 0xdf}, {&(0x7f0000008f80)=""/52, 0x34}, {&(0x7f0000008fc0)=""/4096, 0x1000}, {&(0x7f0000009fc0)=""/4096, 0x1000}, {&(0x7f000000afc0)=""/144, 0x90}, {&(0x7f000000b080)=""/18, 0x12}], 0x8, &(0x7f000000b140)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f000000b180)=@abs, 0x6e, &(0x7f000000b340)=[{&(0x7f000000b200)=""/230, 0xe6}, {&(0x7f000000b300)=""/44, 0x2c}], 0x2}}, {{&(0x7f000000b380)=@abs, 0x6e, &(0x7f000000c8c0)=[{&(0x7f000000b400)=""/100, 0x64}, {&(0x7f000000b480)=""/224, 0xe0}, {&(0x7f000000b580)=""/57, 0x39}, {&(0x7f000000b5c0)=""/9, 0x9}, {&(0x7f000000b600)=""/61, 0x3d}, {&(0x7f000000b640)=""/189, 0xbd}, {&(0x7f000000b700)=""/20, 0x14}, {&(0x7f000000b740)=""/220, 0xdc}, {&(0x7f000000b840)=""/96, 0x60}, {&(0x7f000000b8c0)=""/4096, 0x1000}], 0xa, &(0x7f000000c980)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f000000ca40), 0x6e, &(0x7f000000cb80)=[{&(0x7f000000cac0)=""/10, 0xa}, {&(0x7f000000cb00)=""/117, 0x75}], 0x2, &(0x7f000000cbc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f000000cc40), 0x6e, &(0x7f000000e000)=[{&(0x7f000000ccc0)=""/221, 0xdd}, {&(0x7f000000cdc0)=""/250, 0xfa}, {&(0x7f000000cec0)=""/4096, 0x1000}, {&(0x7f000000dec0)=""/92, 0x5c}, {&(0x7f000000df40)=""/129, 0x81}], 0x5, &(0x7f000000e080)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f000000e140), 0x6e, &(0x7f000000e980)=[{&(0x7f000000e1c0)=""/139, 0x8b}, {&(0x7f000000e280)=""/8, 0x8}, {&(0x7f000000e2c0)=""/132, 0x84}, {&(0x7f000000e380)=""/207, 0xcf}, {&(0x7f000000e480)=""/202, 0xca}, {&(0x7f000000e580)=""/74, 0x4a}, {&(0x7f000000e600)=""/197, 0xc5}, {&(0x7f000000e700)=""/201, 0xc9}, {&(0x7f000000e800)=""/148, 0x94}, {&(0x7f000000e8c0)=""/163, 0xa3}], 0xa, &(0x7f000000ea40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0xa, 0x0, &(0x7f000000edc0)={0x0, 0x989680}) sendmmsg$unix(r2, &(0x7f000000ee80)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000040)="46636174da2201ff9bb154087e8f34a92bb8cdd87417fdd17ceb39c65bf8123ff6b376", 0x23}, {&(0x7f00000002c0)="8ed6f573debed326268acba3e77e334cd1b51bab599c4b1315327da71b7be4ecad95ec4b0ac67abb6ca623ab6d011fd08f78dd24f92588edcd2bd54739fa02d83ae00586d0151fb003a9eadb0ce7c70c3679db80b47a559f3743fb2d556ffc54912bf2d5f4f1c3c0bc4a93e225ad047b4453b983cdbd2b70d081309f44e10cdb08862dbf89e270be0c00aed1891b5fc458ff7934267f5cef80b6de617eedae9c67e50ebdbdb393d8f2dd6a4f3646d44f", 0xb0}, {&(0x7f0000000200)="7d74dca36b9e0f3f5d49", 0xa}, {&(0x7f0000000440)="69d3aa2cf23f3b775e5dc7a551988fcbe49327", 0x13}, {&(0x7f0000000480)="8febec0291fb2fb56992803268482be0db7ce05913f3f28b4e0eadb6288f66a625cf554e206813a24e23a10ae2564d8c65eee28a62c31fe7d45eea80165764bef140990fe65b8fcea1", 0x49}, {&(0x7f0000000500)="7a08ae4e43e286c2f8454bc7b3c71800e606c7f8ea44d1ef3271c55469fafa62fe1f1e5ac7b08fd143610dd3600210e2c1fb05f9b1abd2e1783be64b3e8eaab8d7c3dab1fe76d81e918f94c28534746d8aa1ca59aeaf1cb3dc5c48060abc", 0x5e}, {&(0x7f0000000580)="b94e2f1e429a8cea2d023487167a4327555f29b2cbffc38ff0bb68c479060113628140c592706b7148c4e84bced181888a4e8eef99e111ee4166b1686c05b46621555194b5bd6d5f4dd3ab0fcbd880035c269e51b5c80751ac3eb504d90d6322205644f6b45bce0cb8c1b1021c63d1460ac3eb1bb3e406ef6c0f7e1bdcab3e55d27f4706e64430d926fbdf8b2fa10d9868854585234d7fe601a4008ed3ee0ce6e09f1d81e29ccd333b3bc7ad37f68207a916dd1c9305cc2559b925eab5c6", 0xbe}, {&(0x7f0000000640)="0f45881eedfca7ff4a396b67cb764e37e67953daf08585b9bb2283eed906559fbad91fd7369d8560ba19981044c564306025c514a955c5ac0a78af", 0x3b}, {&(0x7f0000000680)="b9956745141b56405f495e68d69a35a52fb8dfd71deb6e70d42428040dc1f77fc9f86b7ed9b675ea9e9cd88374faf3e182c8ddd6e0fdd56b99c6b8c13cddf9c3567c7b124fabe475f313ee6a2dacbfbe3834de80c26436ed0da42fe08718520540", 0x61}], 0x9, &(0x7f00000007c0)=[@rights={{0x28, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28, 0x1}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000880)="592f11e4f9dc6a4295195496e3a1d1c9c2cbe18238bff5d6680d18e30c1daf1b13beed4b7e7eb70b83d913a69f5fde36a54cbfe8b4ce66fe9d0d19edfc24add49cbf9f73bc09ce0718f6aa65692819c2bbe51fc06519a4a4dd0be6f0aa6f158fef121febecbd95871214928d1dc74bf740cc76e537483201404304cb9c432619249571fb6685bf9a491dbbe2", 0x8c}, {&(0x7f0000000940)="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", 0xff}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="09eb283b670383c36a1e0b88f4ec70ba66b9830ff05b25e2658d33837f48cf2f5172cce0b7f6179d5b0da72d73790c19a9f32e42cee7b3ea4f14f80f2aea17538a97a84606072fe610c5df8adda97f9eea3f78a7e9db829d4403bf2486b1ca1dddc4a4c1e38b8f77711f28d5bda093382e26b459ea6b11f0fece4a8dd3ada44f78f454b54f13509f70972b0344e30aeac668af5e0c0631cd95a52a4dcb49e6e92e9447ceb6d1acda3f958acfb97076f1d952", 0xb2}, {&(0x7f0000001b00)="b219fae991803080b190f7f2ef6569d1ebf1382de7804e68bf0d49a858ba86ab423026", 0x23}], 0x5, &(0x7f0000001bc0)=ANY=[@ANYBLOB="28000000000000df0000000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x50}}, {{&(0x7f0000001c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000001cc0)="e8d9e5fcc67e9781b9eda642e2cc81db088845b7049be58c41f83c04a7619be71feb5d335baf13c0446a9295568175", 0x2f}, {&(0x7f0000001d00)="51cbcc03c505428cea7cbda49ec3ea6313a93415894340fbe1f3a982c70b108086a6ae6ca84e17075b9855d033cd8edafb2d1e8d968d16c1bb362e40fb9b6f6fde200df653f740f5d8e84a84623ee8ccf78550075b56ab04a05d3c5591d1833bdf99c067bf904921a39fcb260432aeb84f1190c128680f49a73f8f393ce178071dc3ef251daa223003aabbe1cd52f59c3ac432c3c8af13482247fa056033e67f328aa691172ae32bd1955d3a7908dd8375bd12bbd970db058020fcfbecce3f8fdd1668d9f378af7cfc1ebd06230c765aecc1be1a45bca099b842fd8f395c10b1b1b9dac441ee8727aae9", 0xea}, {&(0x7f0000001e00)="5552b4826374e16b084dd0c54d577e49dd654f711633121649b6937023a4810d358d9c41cce805cb7e972af57e1c7d6f331460d1062333783c209960c3abcb0f5af264d89f99d76cac4ae8a964042d1fcd88f4ce213c05e3e365adbe45de7f5fa7d42efc8dc69ec79dd8c20f6ddd45", 0x6f}, {&(0x7f0000001e80)="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", 0x1000}, {&(0x7f0000002e80)="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", 0x1000}], 0x5, &(0x7f00000040c0)=[@rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0xa0, 0x8004}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004180)="20e44f351b0e870c323f6b83f0a70fb1cae7fba69083784dac9e801a2eae85ea54b5eb9b3fd118cb1764b888e520c230299271637c1b61c9fc4b4f5fe878357129b1e306f875da5832c69962cb", 0x4d}, {&(0x7f0000004200)="796f21b0b5d5117318ac49d2a472d0cd5a1be30c3d67bcd69550ae157c5b1c03a997db662201571c40e0873ddba5872d9c0cac5f25856054f704df86f1fb4f3cc0654d844a6e32b5d91fb7a6ade8667a85ae4a6c59d8cf91f027f0", 0x5b}, {&(0x7f0000004280)="33a0fd35089badd845e2666009a60114d4ef95ee12a6693695519a96f0cbe7fb5c7a5be7fe3ce795408cec93c0179f9cd03dfa0701061aab06a59b3d5cbc7ce6aacc2853829f3ad163b0a6a800c5f65334ab222fae442fbae6c4180de0adbe00af116be265ac82e64c33644acb89f211e98028c440e55b6ea11ff74b229b0dc658a8067af9a955eee71f6c57ec6f9fe079f93ec3f42e38ebc1d58bda4a67266f6562d1f03c8c70abec491bc0740a1ab6f98dbc694f66aa26342a6a907a8dd39659c8b8fd6fdf3ec8e648b3f6e62f247256aa04e2cdba6c97ef3fa5ae174da9defcf884e750cd3129e65b0f0bfbbdf0fe34d7656dcac2", 0xf6}, {&(0x7f0000004380)}, {&(0x7f00000043c0)="146ceb284e1ff6e965c276716fb5e13d10404858bc0fc661d51f1ee27c7edadb14b4f3124fe3684929ecdea5281f0a45d024c61b240d82448ef6c8b662dc56cb62d4c6492594e36781a836b802c47ae095eeac64d40fa0a8732d8f", 0x5b}, {&(0x7f0000004440)="1514b2706e180d534cd11eb77dcb1265a1badca4098ebeff7001782fbc414ea7cd80f62586d139942203340d2a9b8159f249597d421ed5ba5d9f9ecc443625d347c892a1b25482ece2ad9a3d5fcdbfdc9efd3180a177bc86472025579bf8b71f89864465b12968c375b80fe0ea2373e0c9ebaba83c5880ad7ea498afb05793feac6b7ecc50e6a27f3c754649d6ce61ec8af50dffc6df5025a968ee49420c821821a96ec674c95aad47871e7f9760297c268f2eb8de", 0xb5}, {&(0x7f0000004500)="3bdaf6a22a3348050690528d9c645b66a7a2c8f82075ffbc5e6118f0597a40ebef15a94f723ff92024e9cbc2201558e572cfc9d864fa6c3bfc0d710fbd2dc3ab422ed3da81054af3eb6a567de4e004d245a8442105d45916151ebab3854208a2415e7887ed131cacfc9186c4a0660919e66f3d5fc5fdcd3a3b8d9895c1560e339b23094fb931411c974e06d563eceafd0ee03ed89ea8e6cb7c478d88f5e700a51c91f2c9f84591d8e9", 0xa9}, {&(0x7f00000045c0)="8051882769accda83ee72b1c69540f36769baa9188b59d6a4e8b436a2ceb86b86e94018728774dee9e9776ff5598db1eadc9dfe14331a47e3498a3edc6d55c336f2c422116e5f55ef42f559dd996b3887d6e57161697eec9a5cb8a940da01c014f3885aea6aab9356a107bfbfbedbf77fff20f6049745d359010b5a56a76afc2ce5572c4d340e3db78599a092b1fa6bcc154edbd523d91188fc874b19710795d370b4cba95a7f04a4cf1bb2c30fcab9fd5a1efca341bc86203825333f12ad3aec5d42571ec6b4b572d163226f1cdb64ce0c4738b5e7566051528d924059d625fdfe7ebf29b1dcc4007bbf5bbfd2c3d", 0xef}, {&(0x7f00000046c0)="fc8aa5810dcd4f4d5dfbdf2eb8fba1023a4c773b496f940aab3392c622b47e3e50f929e1dc89ea8c8ff89d5f7a9507af30cc94bcc3c705cf", 0x38}], 0x9, &(0x7f0000004800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r3, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x80}}, {{&(0x7f0000004840)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004bc0)=[{&(0x7f00000048c0)="afef911540a728257bab13fe0f14bea7970c3cd80f0d051f046b9f93ea4ba2bd3bc82a36bc92dce34d322d624cc4c79e6f17c57455dd2576392b4369d12e4ae8b846775f901eab2d2e036c903c465bee657c2f4d4d9f7d48cdda55545be4eac26a76f5fabe2e", 0x66}, {&(0x7f0000004940)="113b38b0066aa4126eff8bfc9a07ce7c8a96ada5b178e6ce42e9d4c48f191a02af7997122aa177f37b80ee6567ae42f6ab71b62a0210b34336d8f732ca977c6cabcda3f0a8dbfd02c60a0620dafc90f9bc59cb02157165a234b457b4f8cbe195d650842bd212994cfb77fa", 0x6b}, {&(0x7f0000004a00)="73870c14ae20d098db96a19aa7cdf318113ff4580ad48d0cd7bbe9aedbf652ea91306c9f7dc72f252457be46239c000963e3e9ab11f3c686a7e9e8ab001b8c83d1597c926ea7ca613f8b77c566e3546eaf77756013242a71a8844e222fbb5e54667b950b5c8647fa5aa6c759d134e41482202484aac306a44df5d3a54581dfe3e1ab7a1ea692cb32db2c53a9cd741c3ac1812c6fa417869d4fd5027e2323946257548d0369188e488207083baa157f0da7c46d3540f7d36b53355bbf0448e7d6a4aec3", 0xc3}, {&(0x7f0000004b00)="6410c41f35f203e4c823e1dbb42ec9ef2d9824fffa642080a66567309deb75cebb27489c47bfbc86acb8b8911fc48d6e5ebfd82c6a3408b3e837a5139868cd1b926e7f09504fdf37d199a4b8ec2d668bcc7bcdc8f0270f7088d7876f8c56d4b57f928d02c9ac1401fbd08fcbc9312fe5915cff4e03c60e498048d03a50b741248e9cb871883c55", 0x87}], 0x4, &(0x7f0000004cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}], 0x38, 0x4000}}, {{&(0x7f0000004d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000052c0)=[{&(0x7f0000004d80)="08defa49d94031768a64c5f85315afd694e47bf50c39697ef454ffe213eeba0c8fcb622e14a13bd537dc1e8fbe7c339bdf242f063f8acfda9054f3b1cfe6f86f00c676d86841e18c4c6fe765aa24e72c2b91bb4c99e8fb193c3917080c5dca2fe121df3c657536c5c7b2e7ed8ff1c1e4bbcfe001c23ae8d5eec07206e45b84dfedca3287143d7fcab90a722a5466e8aa4b13279c48c41c2882a0514586a7c581f8df0163cbf3cb1e8c3d0dfe", 0xac}, {&(0x7f0000004e40)="0f51cdf1c960d5bb2fafa394097200d9e32294c092c42e19f44ef56382e5067b7fd8ab236936d432b6ec3d221e6612489cb99f819c699f63f5ef7c386fcaf474c7a14b6ecc955fdb9d474e0f2f29522bcc279341fa3470", 0x57}, {&(0x7f0000004ec0)="9b1f0755d82c4b42cd1b473e5997193bc4f78b80c0a939a6023e270d009ccb12aed4a29ff6b8ecc68cf40d7ed7586bfc3a06509819d53706219ee2d67771488d42124048bc9ff9b624cb573f06422cc02404fe5580edba7c01567336e9", 0x5d}, {&(0x7f0000004f40)="58d54eeeb1605b297956a0566920bb915a003a982e908f7ccd32965e1702968ded8cf94fa23c7fe4c3659ced0610d2b0bd2f54bfeb1782dd5c1c77a5c6b03bc2246dd29d5df89081c68d6e3b106e404a765a02fbf563fcaa7853f9088da5cf8633f50f764c48f4a2d4ff7fff639759f945444d470981c852071db0175b0da10ee38b5b1335415047f1988791345fb670a06882682b226c5489aa58ebc7c30d94ecfcbf16a20dc65b6e5f785267d418eb8e35f458cc5dddb85215372a563dd920e03c31badb16bb63b489ba0231cba629d99b9045f1d94236b59f0fddedfcbb11dc9a88de9e88dc2fdb972790cd4ba1", 0xef}, {&(0x7f0000005040)="548add68a8d7", 0x6}, {&(0x7f0000005080)="98707dcc91861d57130457829ff7f763ac9f68009fef3ae93ca9bdf0268ba86b41923e5897b0e9beb6ccc970b3abd371202ef293ea809f5cdf48113d455b9bcddecf935d429722d979a718421399a9b660a0dfed74d92c7a2f678cd9b26103f2e471d535f23264e9f3bdd91ecc8b7a1534f062948ff939d96afa2b36bed45b14bd7e2e51646b6f98b32fb3cddb7aa465753484904160291103d9b7392f4954647a5c53ecf3", 0xa5}, {&(0x7f0000005140)="f1bf3b733946530b2da7f773b029f66ec0f0852f5b1b0124a66b5b220e4f111afad34c3589dcbb4c0b5d0d2a1743fea2440278cf5be451f3596526bb2361486684bab87a8da582346fb98a440a200bc4db0a6aaf7070d6cb974e60a83c00585c2cb728aa75f3f8acfe2f8ab99188129d18bc3efe85dd1f0464486a7aaf7491dadff596847c1a9827429afe3a939e0181d88b03d092528daae992777fd5fdc1", 0x9f}, {&(0x7f0000005200)="41c86111b2dbd420fc53824795785a676294446a0cdfa06ceccf4549271b2b90c2b5530801595b042c6790f36cfc17844c56ecff21d92c3786f0821cf2897ba77910fa2371491acd51de0f93c02e84cab29129f8f1492b256f46b4af32c66ffb6a3800bcb89074e89d9d634e809a9455bce6ec8c3f5b98d3777ea6a5386cbb", 0x7f}, {&(0x7f0000005280)="035b9a00873ec55467539c58237c9c9f3ca68dd3a719fe1c0da29f12d88553c0c0f36ce228b91c", 0x27}], 0x9, 0x0, 0x0, 0x4040010}}, {{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f0000005380)="e02266e8d1c6", 0x6}, {&(0x7f00000053c0)="28326b674c3772f4b0288995e1fd8b2a23033c09ab99cdbacc792e77a1b20e97213530ef94544b04d7cbb838cd391c2a76143f560f172d27df20606833ab2a791e77353357d0dc514bc581281979d0b64a4c51ed8dd99f9fa97db2e9018c3bcdb97f086d8cbe7f3264c5e980e840fc7443ec9a5dc41779b223c8e0f50002bf7042071fca71702178d1d28de4bf6b95f04f19ad2a9376326d39d69c0dc52ad2ae51ea0a12e320e129612dfcd51c9904ae9c014a1e8fcfc73774586e73887266a1734cfb670677e07ea267e640a2fc5f6f587fb69029c0d6ec5088d6497719e10c02072ca9407c36b4", 0xe8}, {&(0x7f00000054c0)="bf82091557e73f7ba51014fb2bd670cd1a5f5357432b15f4a577472775a112eb172ce120f48f948d8d759c498cef8474bf1ebdb8d73680106720ee986ffecff1fdd2860301f1875ceb12f69cb189918333c572bb50992f9f83603022f102ea8b10d9a381f5106cd8dd705728387e02ee2b9d0c727db57ad70a7e15ec3cb766bbb06fdfab403202e9831d00505a1159", 0x8f}, {&(0x7f0000005580)="03d924b6deead5f06218fb8aaeccb18852906a5ad47e9f9f6e31099151145546d01d71c4701501acda0caac8a13830523037b14ebed7da572d47fd55f1f0b129249b5e0aa12eb1ae833cc34ef9a4c56087933fceabd3ebe9236969fa49e1f73ac56da98a25d0949fbd8005701a3a67736f0a2a382777725eefaefd249e55c8c03ec1a5cccfdc18085e9496c02b2cb407ec93b3dcfe8c724b1c809430aaf6131b887c217cce5ae2f4c839a1af6c2114fcc54a8b7f4f7e2c74c38daa478422b1bec6f2e529aba3f2479edb4d4430b89037fe70294dcbf6bdb466104557eabb512fa98caa277bd32415e24cd9610898cf2829379580f28382a44bd0b9b6e5", 0xfd}, {&(0x7f0000005680)}, {&(0x7f00000056c0)="7562f17ed769052826c99128a6192d4f39f534f9ec1d8af81cea17ff5cb2ccafe28f07d66f7cc07dcf12792dce168668bd165da2db4c79b5287a8b39bd8efef030572c6398d75fabc23e72d8f22598df4aa4fef2c928355f8c2feea5c71ff8d547ee75445b0a9c3b3c872ea062d0b5bdc23850630ad12bbadb0c280091451e5c1543395b924019102a20747161c4ed5ea716ee6ce8d09508ee2e9fb5266e8d0700d76593ea2b9b22fb17eb98107bf8d4a0325e84a3cbb4892a86b6982dddd24c93abf9bea9ab773095d744a5bb", 0xcd}, {&(0x7f00000057c0)="25a550b40743cab1bd114b17e38f419c3e41706d05dcdcb1574302e733509d1b3fb50949c15e6f3c5ed6c7b78de1006e159159a4713cbbce88a7e3b0e4667f6955d14e0474741b8eb9a9fc579b626ac67fd879942a0f0f8ce2a7fbf0a2dea7dc1bba6d782d97b43e80bd3e173a41933be29420dbb8c789301be42bfa1969ce30f21ada4a63e83170051eac6fdccb4a4fbd3479ee55e124bf0e58e077f7588a53aac58d15b38d142d8c50dd747180427a2dd739fd3e167cf35c133d7b30c9f76c1bec1d9188da3d6f011bd19d96fd22f7ffd5c89def2593e401", 0xd9}], 0x7, &(0x7f000000ee00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r7}}}], 0x60, 0x4040}}], 0x7, 0x8800) dup3(r3, r2, 0x0) pipe2(0x0, 0x0) recvmmsg$unix(r2, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x50, r1, 0x2f2f) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:58:59 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3f00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:58:59 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, 0x0, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:58:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6a, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:58:59 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:59:14 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) read$rfkill(r0, &(0x7f0000000000), 0x8) 01:59:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:59:14 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x69920000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:59:14 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3f93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:59:14 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8a8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:59:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6b, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:59:14 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:59:14 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:59:14 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:59:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@md0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='gfs2\x00', 0x10008, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) close_range(r0, r2, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r7, r6, 0x0, 0xfffffdef) openat$incfs(r7, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x4040, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, ':\xc1'}}, {@hash}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, '9p\x00'}}]}}) write$P9_ROPEN(r7, &(0x7f0000000180)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x8}, 0x1}}, 0x18) 01:59:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:59:14 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6a920000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:59:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="32c307c6000000b0423bb50d6168538c3e6e16ec7a9bed0134c3ffa0586d027d5ff85b857e8878f66c7332a6d78382cde81d63758a8b0b2484bdd76bf1c3c070c28b7fed6a796e36b0640ba1c34cc6ed1e93f892013a38ad3a491cee05288fc030557b94a4615c0c7b2f31e0d3b50a55627f8fd53a511436db4e306265b52a79a83b2ea1767cd805cdfe90fa0d4374d8d7eb3c0f42eb21c0cdb6a18e7df8bfeb37979beda85cdb54a7af1382e5e1abf42500a4e6a741f0f9675c1d729af74a47bb3df1327f5051d07ea55768bfa36393fab846b6ae31096b065decc87b56692d803569a2a945259a556e6e2518050e576e5e7d00000000", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) 01:59:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r2, 0x72cb8000) 01:59:14 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:59:14 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:59:14 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8b08, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1193.894021] 9pnet_fd: Insufficient options for proto=fd 01:59:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x837, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:59:15 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:59:15 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6b920000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:59:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) r3 = shmget(0x2, 0x4000, 0xf0000000, &(0x7f0000ffa000/0x4000)=nil) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) openat$incfs(r5, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000001c0)=r6, 0x1) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmat(r2, &(0x7f0000ff0000/0x2000)=nil, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd700018dbdf25030000000800020003000000080003004b000000080003000000000014000100000000000000000000000000000000010800030001000000486c30291d7ee3ecb485b945ae46", @ANYRESOCT=r2, @ANYRESDEC=r1], 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) read$rfkill(r0, &(0x7f0000001780), 0x2) 01:59:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c4cf6646e6f4b", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) 01:59:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8b8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:59:31 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:59:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6c920000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:59:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x900, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:59:31 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@mcast1, 0x0, r3}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)=r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) r5 = openat(r4, &(0x7f0000000100)='./file1\x00', 0x58200, 0x169) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r5, &(0x7f0000001780), 0x8) 01:59:31 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4093, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:59:31 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:59:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat$incfs(r1, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) renameat2(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:59:31 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:59:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6d920000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:59:31 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4193, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:59:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9b5, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:59:31 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:59:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8c8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:59:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7f6664ee6f3d", @ANYRESHEX, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) 01:59:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x20}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) read$rfkill(r0, &(0x7f0000001780), 0x8) [ 1210.877115] 9pnet_fd: Insufficient options for proto=fd 01:59:47 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1002000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@cachetag={'cachetag', 0x3d, '*'}}, {@cache_fscache}, {@cache_none}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@fscache}, {@aname={'aname', 0x3d, '+\x0e],'}}, {@aname={'aname', 0x3d, 'version=9p2000.L'}}, {@mmap}, {@loose}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fsname}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@seclabel}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:59:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:59:47 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:59:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6e920000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 01:59:47 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4293, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:59:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) read$rfkill(r0, &(0x7f0000001780), 0x8) 01:59:47 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:59:47 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8d8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:59:47 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 01:59:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) open(&(0x7f0000000000)='./file1\x00', 0x541001, 0x71) 01:59:47 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4393, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 01:59:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xb00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 01:59:47 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 01:59:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6f920000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:00:03 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{0x0, 0x7, 0x101, 0x3f5300000000, 0xa3, 0x3, 0x7, 0x34a, 0x9, 0x7fff, 0xfffffff7, 0x6, 0x10000, 0x100, 0x4}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001440)={0x0, r2, "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", "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"}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:00:03 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:00:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e81, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:00:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x1020, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:00:03 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:00:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x7e010000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:00:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4493, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:00:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x101, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0xff) sendfile(r1, r0, 0x0, 0xfffffdef) r5 = openat$incfs(r1, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=r5, @ANYRESOCT=r1, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x8044) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e40), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r8, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r6, &(0x7f0000000380), 0x8) 02:00:03 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:00:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:00:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x86) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d473511e0b90caa8d53020fa330e67861b03c6c8e227624e9911fa15d552bc29fa048f6f888e3cd0833c3056d", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) 02:00:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e82, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:00:03 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) [ 1242.738729] cgroup: fork rejected by pids controller in /syz5 [ 1242.761501] 9pnet_fd: Insufficient options for proto=fd 02:00:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x84800000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:00:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2010, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:00:03 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000580)) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:00:03 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) [ 1242.968045] perf: interrupt took too long (2519 > 2500), lowering kernel.perf_event_max_sample_rate to 79000 [ 1242.986139] perf: interrupt took too long (3199 > 3148), lowering kernel.perf_event_max_sample_rate to 62000 [ 1243.013105] perf: interrupt took too long (4003 > 3998), lowering kernel.perf_event_max_sample_rate to 49000 [ 1243.040708] perf: interrupt took too long (5031 > 5003), lowering kernel.perf_event_max_sample_rate to 39000 02:00:20 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x100) 02:00:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3708, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:00:20 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:00:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:00:20 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4593, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:00:20 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000580)) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:00:20 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:00:20 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e83, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:00:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x3f00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:00:20 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:00:20 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:00:20 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x14000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0x6}}, {@fscache}, {@version_L}, {@cache_none}, {@nodevmap}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@obj_role={'obj_role', 0x3d, '+'}}, {@dont_measure}, {@seclabel}]}}) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77319d9be375", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) 02:00:20 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e84, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:00:20 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000580)) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:00:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) [ 1259.924077] 9pnet_fd: Insufficient options for proto=fd 02:00:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, r1, 0xee00) fstat(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0}, &(0x7f0000001380)=0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x3e, 0x3, &(0x7f0000001240)=[{&(0x7f0000000180)="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", 0x1000, 0x3f}, {&(0x7f00000000c0)="42195b8dfc52c762412a34", 0xb, 0x2}, {&(0x7f0000001180)="15df51d83cba8bbdbcf048fad6ee7de24d023f0fae48ec2c6596d189e5b69cd4ec2b9a69c6061888bfec4745b8690989d2b8d4fbd0cd194353ab6e032c03c43c2617d4ab1e3680e24d848b5f80bef65704aa719b6f76715dc5b9aac5d9f5316d712d3387def5a28ffbd9f0a8e65a40da51679453dcade98498bcbebd281219987a429b5f4c4bb96f46adb4001561448484a0f6e065f35e9948643c3868bf0de449ba517b3fd40c998ac33e608b317d58cc4f2b527da5bdbbc249a9aaed6c", 0xbe, 0xffffffffffff0001}], 0x2000, &(0x7f00000013c0)={[{@rodir}, {@fat=@uid={'uid', 0x3d, r1}}, {@nonumtail}, {@numtail}, {@utf8}], [{@smackfsfloor}, {@subj_user={'subj_user', 0x3d, ':#/'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '/'}}, {@hash}, {@obj_role={'obj_role', 0x3d, '.'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fowner_gt={'fowner>', r4}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_type}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:00:21 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4693, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:00:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e85, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:00:21 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = clone3(&(0x7f00000003c0)={0x1a3363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000180), 0x0, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x52d}}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r6 = fork() kcmp(r6, r3, 0x3, r2, r4) 02:00:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xe4ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:00:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6a00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:00:36 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:00:36 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4793, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:00:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:00:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) write$binfmt_aout(r1, &(0x7f0000000180)={{0x107, 0x8, 0x7, 0x23a, 0x3be, 0x401, 0x343, 0x6}, "8984afb7a91b95e9642f952c09e82d9eb817d081b4fc48ed37845c26a9ee110e0eb050a10318b6ef79815f6267cd6019253e329806604f2dbcf5e18726a958c07783747a12641ac24951d859e4129a9d1f75ddafcfbb16e842f2e989e19731d19e5e8f", ['\x00', '\x00']}, 0x283) 02:00:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e86, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:00:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r3 = signalfd4(r2, &(0x7f0000000180)={[0x5]}, 0x8, 0x800) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x9, 0x3, 0x1, 0x3f, 0x0, 0x1, 0x10048, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x21a0, 0xffffffffffffb8b3, 0x7ff, 0x6, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, 0x6f0a}, r0, 0x7, r3, 0x4) 02:00:36 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:00:36 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:00:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xffff0000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:00:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4893, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:00:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='vxfs\x00', 0x80, &(0x7f0000000180)='}2\x00') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:00:37 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:00:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:00:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = socket$inet(0x2, 0x1, 0x3f) write$binfmt_aout(r2, &(0x7f0000000180)={{0x10b, 0x6, 0x7, 0x1ee, 0x21f, 0x5, 0xcc, 0x3}, "2156cb3deee0cbc74b1b47b0c7cd5f0c6af4bf881e53ea22a1c55da5d770a95474172d4fca9e8f3f202d0f9965a39bfb641b60921d63d48f9b678c90d4c76509cea541ea8b1b619629f112bc5900"/95, ['\x00']}, 0x17f) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="62bc35af45280eea5a7ada3b82d0bcac214b1b96b12a550167b649b3fba7a35af963e09cace5708384192ff4b5e6ffe8bc0c73950fa005928d8d37b2766302a26333659ac1cff465290698bf25d90dfd1c44dcf361179eb0614ff3e769b2ad968472259e8be3c3d7a92b83dc2badf9b93c7a9dcf65a53656096e14022fea8f53dca54b210883d657b1aafde5824a167a5ec2c1e809c1ffda38356325f69af4ae", 0xa0}], 0x1, 0x5, 0x3) read$rfkill(r0, &(0x7f0000000000), 0xffffffffffffffdf) 02:00:37 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:00:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6b00, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:00:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8084, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:00:52 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:00:52 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e87, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:00:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)={0xd7f0, 0x80, 0x0, 0x6, 0x5, [{0x3ff, 0x3, 0x9, '\x00', 0x402}, {0x8, 0x5, 0x7fff, '\x00', 0x7}, {0x2, 0xad8a, 0x100000000}, {0x5, 0x1200, 0x288}, {0x1, 0x6, 0x100000000, '\x00', 0x1000}]}) 02:00:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x40, 0x1f, 0x2, 0x0, 0x5, 0x22, 0xd, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x9}, 0x200, 0x5, 0xfffff001, 0x0, 0xffff, 0x5, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}, r3, 0x4, r0, 0x0) 02:00:52 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:00:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xffffffe4, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:00:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4993, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:00:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xfffffff6, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:00:52 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:01:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e88, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:01:06 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r3 = getpid() perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r3, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r3, 0xe, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x81, 0x80, 0x3f, 0x0, 0x0, 0xffffffffffff7fff, 0x63a0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf1b3, 0x4, @perf_config_ext={0xffffffff80000001, 0x8}, 0x4000, 0x7, 0x8, 0x4, 0x100, 0x800, 0x7, 0x0, 0x1}, r3, 0x5, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x2, 0x0, 0x7, 0xfb, 0x0, 0x5, 0x10002, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9a51, 0x2, @perf_config_ext={0x9, 0x100000000}, 0x4040, 0x8001, 0x9, 0x9, 0x5, 0x9, 0x100, 0x0, 0x1, 0x0, 0x2}, r3, 0xb, r0, 0x2) 02:01:06 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:01:06 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:01:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98bb, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:01:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4a93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:01:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffffeffffffff, 0x1ff) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = syz_open_dev$rtc(&(0x7f00000000c0), 0x2, 0x402300) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = pidfd_getfd(r1, r0, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) io_submit(0x0, 0x9, &(0x7f0000001900)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x6, r2, &(0x7f0000000180)="8aae1e9003d1bee6", 0x8, 0x0, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x16, r3, &(0x7f0000000240)="3e1b3dc5f596be", 0x7, 0x0, 0x0, 0x3, r1}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0xf17, r4, &(0x7f00000002c0)="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", 0x1000, 0x3f}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x5, 0xb474, r0, &(0x7f0000001300)="0b76052801a7317f0cea4d2fcc75", 0xe, 0x1, 0x0, 0x1}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x7, 0x20, r5, &(0x7f0000001380)="7df8e0ed85dc5670766b556314cd9786804921b041efb2cbd0e3073fe632e658f2dcf960c79b03f5d48cdf252e20b48595875f4379eaac886a536810e76ddac6238665803be7c5d0a688b09b237b19006bfb244b859de9f55597995af82dc6d9fa306e1a30ec2fb6f179acf9ea510170df14aa1a89fa7a353b339e3f88f5e7a18ab804a96edb34ce16c482166be84c0ee9e5ae63f3539e2c3d9741c9fbd8b47c78bc6f0e17647dba920c8a41915299d1e73675f8d7ee81d989", 0xb9, 0x8, 0x0, 0x0, r1}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x7, 0x2, r7, &(0x7f0000001480)="d6ec1e48e7f3c000f2a503af8916ef8725631e20113817186f33331df3221b7cae433ee62a872a890b6d4045cdcd5d8a76071d12d01bc6d65706c0cce5a0a71a1c67e1fbe67de437ac4972ddd6adf2801ced950b1510d50f5a2a435e81a1daa9aa241f87d4ab325df9710a3dfb49114e4f8ed5fb5649b2f82865927d2d8accbd0f83d284001f9ce88b4d12c2befaec513342fca20cf06f0187d1c81b5d212ea7cf84cb66038842f9f1af8795414c503d0f9f1bc1336613ca1d203f6d426c609b5874227354ee7054474ae37c62e27ed4dc67429087d60b99af9ea15df7b4", 0xde, 0x0, 0x0, 0x3, r1}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x5, 0x40, r8, &(0x7f00000015c0)="069b3b38568699f18d3ba1a08d1187db65d8192de942ace2858b33b2a5139e64901aae9efad515911f0423af21c9eba17392677ef9a63ad16bec1d4ef099c5489890625f98c9628e1352a39332f7726e14d5477e3f025cfcf67196c00169bb4d1342b161619d1835830870eee73477b880534b6cd2353c33a601f8df6f6507ade755a203a20b1716431107ba826c6fe7a0631f33ce258e4b5dc79ff16080e1d307b874f764b2000d7d7bd746d18bb5f2bda9d52ab750a85ae6c99f66bdba50b253a0728f2aa4014ead06028552c7f0c8", 0xd0, 0x81, 0x0, 0x1, r1}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f00000017c0)="ce036ed18bf14941815a776f595e8917db0ba6d2d304d40e850a41c7d04fe8b279e1034f67c0ddf6ce14310c5876a91312243688bf4dc8d3707cba7bf7687564f0368a2e8e3db9ee3d7c3ecc885f632acd43ccd0f81bf39eb1f384b6af1ebd1fa042cbb3f6cd764b55385082cd3f8685117017e7356e94abb4c20ecd26847f844b22f72cabf64f38885588680568d9db412b731351a492ec12ded8fe06883cb50236dfe88f79063d8768233ab31eafedb8983fb42dc32c041c5798fb4ae31019247b0c804dca915eb0ffbfc4921fc1656edf8fecddb99177576294f3ddfc57c8543ffd2303c61d", 0xe7, 0x3b7, 0x0, 0x2}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000001740)="0dd046895a2664e0d0e729d4d381cff202873225304749d1e8", 0x19, 0xff, 0x0, 0x1, r0}]) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x0, 0x0, 0x7fff}) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:01:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8084ffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:01:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xedc000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:01:07 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:01:07 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e89, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:01:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x1000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:01:07 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:01:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) clone3(&(0x7f0000000100)={0x1633e3500, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:01:07 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4b93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:01:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = accept4(r0, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f00000000c0)=0x80, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "ecfa3aed2cdb3c49104a5a42e258c47d"}, 0x11, 0x2) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:01:07 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:01:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98bc, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:01:07 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:01:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:01:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x100000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:01:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4c93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:01:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) r3 = getgid() r4 = getgid() r5 = getgid() setresgid(r3, r4, r5) lchown(&(0x7f0000000040)='./file0\x00', r2, r3) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:01:37 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e8a, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:01:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xe102, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0xffffffffffffffc0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000740)={&(0x7f00000000c0), 0xc, &(0x7f0000000700)={&(0x7f0000000200)={0x4ec, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff0001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x150, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3ff, @remote, 0x101}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4000, @private2, 0x244}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8ea1, @mcast1, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}, @TIPC_NLA_NODE={0x224, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6d, 0x3, "ed51a5eaff40a9ff2052f888291c42ea95db8e7692ca410b7fced2b90485edc829ae7b7f9d4ea2995f4d1096cbbd058b652b6a6f2873d9a9673568c5549fd2cd64a4b69512e19631a69c88c9bbc85bd1fbb114e647e809e1d451f0a94d31a26dff95ce37e4e5cb4333"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "05c226b34fe86a06784383b629f1439d005890232c654902db0a30600adccd034b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "22c429784e84baf7ffee3e1d3ff50cc678da05bcd057"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e51b39a307247fbdc8dd2e2f4f1784a545608c1e85145caa7a"}}, @TIPC_NLA_NODE_ID={0xc5, 0x3, "1f122f2eeb603560232ea685d4fbc47f60012f17aa4a6279340a3676558b095bf9145494b32d7498cd001463ee8187e35105eb2151881743fd1b9dfe4fc98d07847d2d48d77f6fbf7a4f64e54c12b952c3d4e6b5628cb9383a7a7177e211fc6fbe9981c270c752273fe469650b0ddf343fccfd5794d6e524679d5a12aa689e3b876526a9cf5563643997a2b9b176e40d7536d301a8b199148a0ee679eb8543a232e867f34bcc47f5f558c7097a9855ae7b008d04b54c604ae90e01de208c53de30"}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xb8, @local, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x80}, 0x0) fstat(r2, &(0x7f0000000180)) 02:01:37 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:01:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98bd, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:01:37 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:01:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:01:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) pidfd_send_signal(r0, 0x22, &(0x7f00000001c0)={0x29, 0xffffffff, 0xb351}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(r1, &(0x7f0000000080)='./file1\x00', 0x2180, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) memfd_secret(0x80000) read$rfkill(r1, &(0x7f0000001780), 0x8) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="3bcddfcd61025c46dba087521647a9f3ebd13a22090eecf3a19977ca1655c6d6c070a467c31ccd113c18beb9d4baf9f06e692a7a45f3829fa9754b4bcc2a4eda6a1230c6088e2905eddd20c573ba6520216ac5fc", 0x54}, {&(0x7f00000000c0)="9e58e71f9e08696e0538e658728a3080972438638e037c15880f50c654791d61", 0x20}], 0x2, 0x7, 0x86, 0x8) 02:01:37 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400040, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@local, @remote, 0x0}, &(0x7f0000000440)=0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000002140)={{0x1, 0x1, 0x18, r0, {0x415}}, './file1\x00'}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002700), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000002bc0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002740)={&(0x7f0000002ac0)={0xdc, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4801}, 0x4008010) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@report={0x130, 0x20, 0x4, 0x70bd2c, 0x25dfdbfb, {0x2b, {@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4ca8, 0x4e21, 0x8, 0x2, 0x0, 0x80, 0x11, 0x0, 0xee01}}, [@sa={0xe4, 0x6, {{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4e23, 0x2, 0x4e23, 0x7ff, 0x2, 0x0, 0xa0, 0x4, r1, 0xee00}, {@in6=@private1, 0x4d6, 0xff}, @in=@private=0xa010101, {0x7fffffff, 0x401, 0x8000, 0x7f, 0x5, 0x523a, 0x100000001, 0xc8}, {0x4, 0x800, 0x1, 0x8}, {0xe8, 0x1, 0xfffffffc}, 0x70bd29, 0x3501, 0x2, 0x0, 0x7d, 0xa}}]}, 0x130}, 0x1, 0x0, 0x0, 0x30044010}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2480, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@fscache}], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}]}}) recvmmsg$unix(r0, &(0x7f0000002780)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001880)=[{&(0x7f00000006c0)=""/144, 0x90}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/177, 0xb1}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4, &(0x7f00000018c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001980), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/156, 0x9c}, {&(0x7f0000001b40)=""/156, 0x9c}, {&(0x7f0000001c00)=""/28, 0x1c}, {&(0x7f0000001c40)=""/35, 0x23}, {&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000001d80)=""/112, 0x70}], 0x7, &(0x7f0000001e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001f80), 0x6e, &(0x7f0000002580)=[{&(0x7f0000002000)=""/245, 0xf5}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)}, {&(0x7f0000002180)=""/190, 0xbe}, {&(0x7f0000002240)=""/171, 0xab}, {&(0x7f0000002300)=""/234, 0xea}, {&(0x7f0000002400)=""/246, 0xf6}, {&(0x7f0000002500)=""/89, 0x59}], 0x8}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002600)=""/108, 0x6c}], 0x1, &(0x7f0000002940)=ANY=[@ANYBLOB="1c000000000000000100000002000000d5c669b3e5a377363f341f0bf82b099c421a1e93312ebbab71150d7f30869eb8ffdb18e99d7b09ef1ba321322179939eb47949d07bea5cfe65718973dbb174515dbab585bd1eb886d5060d326b773b6ecf442affcb9189ca60fcde2b28a482f690320219d72a353bf824a8b6db605c9c9171827b1087a23fd6f4a29edd75d1da94dbf05d71a24e59a15dd1283d55f1262096a8c714335e78d829a52b31d58c1a8dc58f0bfde1b3260d14eca68db588d564400e73f8c812ef9b612c51e8f6b78640aa", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}], 0x4, 0x40002120, &(0x7f00000028c0)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000002900)={0x2, 'wg0\x00'}, 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:01:37 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:01:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x700000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:01:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pidfd_send_signal(r5, 0x37, &(0x7f0000000480)={0x36, 0xffffffd8, 0x6}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) r6 = accept(r4, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000200)=0x80) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) 02:01:52 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e8b, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:01:52 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x16c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xee9, 0xb}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3f, 0xbe, "1c428ff7535fdb33464158c966abe9ee8695b8e1b902df21d5034c646ed37c94cc2a0ec6ffcf0c3f63f75054f531a016644d934a4f30ef30368176"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xfa, 0xac, "ea8324166ff62395c2c204956e3058854ba45115ebd8572f8f5a5c666667011dec17d7ea40ce029cf1da6a023ffeb132f63ecae6567379d63e33a9791c16d4880290de8386544f6f5b00651600ddc1aaed5d1b1ba5350c45b8ce8ef94060911af442a7157c8ecf8914f66f72d69ce71342803ddbb6c35f5a1c451482c980b5a25c2e0893384d19e9d183c92621137b27fb2ee98d145e705a72ae7de5ca8a8a98ffe75b69882457cbdd05b842f3670202e76e913e4c8534c5ce0e149dac9a021c0ec760295356d0c08ade910764b5e5e205e855ae9c751af838c6e46e0960aafd0e0476826891bef944a7aec6b9ad4ece9c75e80489e5"}]}, 0x16c}, 0x1, 0x0, 0x0, 0x88c1}, 0x40091) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003140), 0x8201, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000003180)={{r5}, {@void, @max}}) sendfile(r3, r2, 0x0, 0xfffffdef) openat(r2, &(0x7f0000000000)='./file1\x00', 0x50480, 0x8) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) clock_gettime(0x0, &(0x7f0000003040)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000002f40)=[{{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000014c0)=""/155, 0x9b}, {&(0x7f0000001580)=""/202, 0xca}, {&(0x7f0000001680)=""/42, 0x2a}, {&(0x7f00000016c0)=""/39, 0x27}, {&(0x7f00000017c0)=""/191, 0xbf}, {&(0x7f0000001880)=""/203, 0xcb}], 0x6, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001a00)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/115, 0x73}], 0x1, &(0x7f0000003240)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00010061b10000000afea74ee6d48e45b004160012c05adfe82cf6aa112b3a2be28a4dc10af1b75c5ad456356688383f39c3f5634c6cc529a32122e584b89ae30bc456a55148b22fd15602c26e7e25cedba1dd697959121be9bcf4b8d6f128a9"], 0x88}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001c00)=""/84, 0x54}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x2, &(0x7f0000002cc0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002d00)=""/48, 0x30}, {&(0x7f0000002d40)=""/172, 0xac}], 0x2, &(0x7f0000002e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x4, 0x10023, &(0x7f0000003080)={r7, r8+60000000}) syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000380)='./file1\x00', 0x6, 0x2, &(0x7f0000001400)=[{&(0x7f00000003c0)="88f37f4fa3c8", 0x6, 0xc}, {&(0x7f0000000400)="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", 0x1000, 0x7}], 0x224010, &(0x7f00000031c0)={[{@nouser_xattr}], [{@euid_gt={'euid>', r9}}, {@pcr={'pcr', 0x3d, 0x1b}}]}) 02:01:52 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:01:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4d93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:01:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98be, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:01:52 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:01:52 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:01:52 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:01:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4e93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:01:52 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:01:52 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:01:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x800000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:01:52 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e8c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:01:52 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:01:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98bf, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:02:11 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x900000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:02:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x4f93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:02:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302e4c2c76657273696f6e3d3970323130302e752c76657273696f6e3d0970323030302e4c2c0009482ed2ac80539ad951fbfd13e452dc6a9507a14579440dc4f61111f051bf57ff6707208c8073dfa92d14a3c00922e9aa31033b9457200c85f6b9be8ae4b457ee0aad37abc554cba9762ee62c9b55d0067eee80b57a233bccb3f785e900046ee3fffc535d661f210e5f50b44ac20045d652bc872e6f11d85aa23bb35a7711cbbbf91cb25c51675f7b20"]) 02:02:11 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:02:11 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:02:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000001ff18000000d6a50035e7015bd1f4bba56cc952d7071e5ac780ea42135603ff38c240eba94fcba26baf420886beac35060485705aaebc424f073c80ffb59c8dff70a50dcab8db14b1fc9f56596fc9b96f28439f1958d1555e4a4cf3e77278e508a418d061e111de3e5e1a0152088bb88c2767446e49923b1da250b8715df2c8", @ANYRES32=r1, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) openat(r2, &(0x7f0000000040)='./file1\x00', 0x8281, 0x1ac) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)={0x1114c1, 0xae, 0x8}, 0x18) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000280)={0x0, "e0d161c5fdc3b33257631c3450595565"}) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:02:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98c0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:02:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e8d, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1370.704752] 9pnet: Unknown protocol version 9p2100.u [ 1370.712143] 9pnet: Unknown protocol version p2000.L 02:02:11 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:02:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8a180, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) open_by_handle_at(r0, &(0x7f0000000180)=@OVL_FILEID_V1={0xd5, 0xf8, {'\x00', {0x0, 0xfb, 0xd2, 0x4, 0x4, "a6c5c31cc693183af4e27e56bcb94fee", "86b7b93b75fd3c52d1840fea6fce0a2b44504c39a2c296a3bdaa5559224822f0f783bede565a9cf1d178406c5ed51017fce892865e89521a4d9d36857069806161fd3fce0a4576d4b6836297d02e9c0973dfb981e89e7f0284c8007075861fcafcc6a71395cf2cbbb66813a5e752408bcb801cd8932c6e126bb521a15beb9c7d21496e481632f90c7cf4f155e14835869d1e1d1aebde3f1e61ce3ac5ee81b397377270b8d5cc27450d89aacf01a68d911f10286c67fa5591ed6fb6b176"}}}, 0x280000) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:02:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5093, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:02:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:02:11 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:02:12 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:02:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98c1, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:02:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98c2, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:02:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat$incfs(r1, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x4042, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r2, &(0x7f0000001780), 0x8) 02:02:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:02:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5193, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:02:29 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:02:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='wchan\x00') perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x5, 0x20, 0x1, 0x2, 0x0, 0x7ff, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x401}, 0x5, 0x40, 0x2, 0x9, 0x5, 0x36, 0x101, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r9 = creat(&(0x7f0000000200)='./file0\x00', 0x1a) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000340)=[r0, r1, r4, r5, 0xffffffffffffffff, r6, r0, r8, r9], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:02:29 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:02:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xb00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:02:29 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:02:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98c3, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:02:29 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:02:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x141000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) sendfile(r1, r2, &(0x7f0000000040)=0x998, 0xfffffffffffffffb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:02:29 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:02:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x8, 0x50, 0xca, 0x9d, 0x0, 0x5, 0x80088, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x10080, 0x8, 0x1, 0x8, 0x80000001, 0x2, 0x6, 0x0, 0x1ff, 0x0, 0x6}, r2, 0x5, 0xffffffffffffffff, 0xbdd49017f81c2f17) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e7b3d66642c726664804312079beb744cc359f7caef9bc2dad6bf314e6be5975bbd0c2a077072ad3df7092b439e4e56f900e55b", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) 02:02:48 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x1000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:02:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98c4, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:02:48 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e8f, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:02:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5293, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:02:48 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:02:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x101b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) r6 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(r6, &(0x7f0000ff0000/0x2000)=nil, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6]) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) 02:02:48 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:02:48 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) stat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r4, r3, 0xee00) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x2010860, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@version_9p2000}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'rfdno'}}, {@fowner_gt={'fowner>', 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x38, 0x54, 0x64, 0x7c, 0x35, 0x33, 0x35], 0x2d, [0x66, 0x33, 0x64, 0x64], 0x2d, [0x62, 0x35, 0x38, 0x66], 0x2d, [0x32, 0x65, 0x35, 0x31], 0x2d, [0x63, 0x36, 0x38, 0x62, 0x65, 0x30, 0x36, 0x32]}}}, {@smackfshat={'smackfshat', 0x3d, 'version=9p2000.L'}}, {@fsmagic={'fsmagic', 0x3d, 0x10001}}, {@uid_gt={'uid>', r3}}, {@fowner_gt={'fowner>', 0xee00}}, {@permit_directio}, {@euid_eq={'euid', 0x3d, 0xee01}}]}}) r5 = clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) perf_event_open(&(0x7f0000000100)={0x5d13a97919027d56, 0x80, 0x1, 0x7f, 0xba, 0x77, 0x0, 0x80000001, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x45, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x18066, 0xfff, 0x0, 0x2, 0x10000, 0x20, 0x27bc, 0x0, 0x1f, 0x0, 0x5}, r5, 0x7, 0xffffffffffffffff, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:02:48 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e90, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:02:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5393, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:02:48 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:02:48 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:02:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x14042, 0x301) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000480)=0x6e) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', &(0x7f0000000540), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e21,timeout=0x0000000000000966,sq=0x0000000000000004,timeout=0x000000007fffffff,sq=0x000000007fffffff,cache=fscache,sq=0x0000000080000001,rq=0x0000000000000d64,dont_appraise,measure,subj_type=-^+-\'\",uid>', @ANYRESDEC=0xee00, @ANYBLOB="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"]) dup(r1) r2 = syz_open_dev$sg(&(0x7f0000000580), 0x6, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000005c0)=0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000140)='\x00', 0x1}, {&(0x7f0000000000)="0f16ec0b052fadd841552e8a2dced45573d248f89c25434936465f57ea3a27f244dfed1fe764b592ef5a508c0f4f9f496a88bb2d2c2a2b930fa585080f587f2161fd62aaeb99955c7e82bb02f37ad15628d7e2df96", 0x55}, {&(0x7f0000000180)="251c7a664c7df84a87ed5bb7aa7492a09f315ea034fd0ef6001a34c5a1e2bc2d88f97898a652e128a9a4c0dcc8aa94ec42a60a572300395a675f450f355ddbae4fac269c9668c1e8d08220c8cfcaf87ae088f31c6f0c0c4840215fce9be15bcd8683599984686bb9e7814dcfa6e05d532c6127213c1b92197f58d547435d81a8474b3fcfb9e84e857930718e960e9bbef6c5fdab0183654272837866887a08067441c2782dc9846937c4e3b040db4c69e85b4da22b1bd6362e32f3e549a0bd7e119a98dd37f541569d9ad9b44305f78fed80c28209f1", 0xd6}, {&(0x7f0000000280)="59ef04d5975cfdf18b376629174e3acc88a41badcb86fbd64f01b3172873792078eb983b7bed7f6808f6c4835b48710cfd8015d95892cd7014f19d8a3b99f5dff118cac8a65e1afe4b80ec6e119353b77b1b66b4", 0x54}, {&(0x7f0000000300)="cf36a4819113270dbcae1eaeb43e0434ebbafea0f98745c421c19fd628593a506546715df01def7176d6a86c27acf1edae310918c4e30e236f84cfe637541a06b249b10c480c15902974bc538b3f731ae75360843198d9655a337ca14df287d8275de0fd968c40c5cd2ec699540affed8ca7b65dca71a03a03257c3be9dd06b3cb6e5fd43d90917f0571257c03c2e4a6ccdde503e596433233ec802775eaa7b96fd21a7ec1e2f53683a8181228787d7a8d80e6a0bf8e062e951317299ffccbb64a9be0fb6748e97c1c166dba2f5947111f3baa7a02807d82900c83f1c8e8532fd49692239258b1bb4355f61c3b1ca2c913cf", 0xf2}], 0x5, 0xcb, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:02:48 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:02:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x1a82004, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@debug}, {@version_L}]}}) 02:02:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98c5, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:02:48 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2010000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) [ 1407.554832] 9pnet: Could not find request transport: rdma 02:02:48 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:02:48 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:03:06 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:03:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xb8) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@random={'btrfs.', '\'!*\x00'}) read$rfkill(r0, &(0x7f0000001780), 0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10010, r0, 0x96735000) 02:03:06 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:03:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98c6, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:03:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e91, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:03:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5305000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:03:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5493, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:03:06 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file0\x00'}) mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x9800, &(0x7f0000000140)={0x100081, 0x88, 0x60000, {r1}}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:03:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e92, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:03:06 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:03:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6992000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:03:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5593, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:03:06 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:03:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x100, 0xc9) pwrite64(r0, &(0x7f0000000180)="a00f4211c65cdf4f5e850bbe2bb0ad6fe937cc18a39a41e73b99e7e6cbb388d4fcce27bc75443bd88de65840e3bcae5be28838ccaf9c121fefda4b87b9408f7a25106e5d3c42a4ea38853cf010ebfd9dad3aa1a938b9a9ab57e35309465c128fd5b71e2494c2f1d83f012642df1b52cd12a5b936914666a8283993f3b83c1ef9e9ce6c0a", 0x84, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x192) pwritev(r1, &(0x7f0000000080), 0x0, 0xffffffe2, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x9a, 0x1, 0x5, 0x0, 0x6, 0x20002, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x7}, 0x0, 0x40, 0x9, 0x0, 0x2, 0x10000, 0x6, 0x0, 0x8, 0x0, 0x8}, r2, 0x0, r3, 0x3) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:03:26 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:03:26 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:03:26 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6a92000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:03:26 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:03:26 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5693, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:03:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x105001, 0x0) fcntl$setlease(r1, 0x400, 0x2) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) setxattr$security_selinux(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200), &(0x7f0000000440)='system_u:object_r:syslogd_exec_t:s0\x00', 0x24, 0x2) keyctl$chown(0x4, r3, r2, 0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000200)=""/164, 0xa4) keyctl$set_timeout(0xf, 0x0, 0xfffffffffffffff7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) openat$incfs(r5, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="5320c489733d66642c727d646e6f3ddc71e9bd060000002f877bf8bb743e695689584736add103172fddad0fc5ac449ed119869d9913c7a1feb4e2cffd27df894500d2e1e15d0558b43dc5d30cf955587b0cd2ad000b59115a3164b439b6e940b69a762b7a5a3ffa386e5a545111611872b0d45f5e4cd4f13cbfd490d7aa9e854318da5a6016e8d0e8a51760fd4446a627720fb2854b94e61dc8562974694e0bc245dbd5128b606924974875064142d4e3a8342eab88938f0eca8a5dc7cc47062e4eadecb31fde37a89df528009f124b63d32c9c07c78d0691fa", @ANYRESHEX=r5, @ANYBLOB="2c7766646e6f3d39b0c30239dfe966d2f001a3409e9075c46cb05bf9ca12dc62c92f0d2e7f8c3dadd960a3372a2ad37ca0", @ANYRESHEX=r0, @ANYBLOB=',context=unconfi|ed_u,u\x00\x00<', @ANYRESDEC=r2, @ANYBLOB=',\x00']) 02:03:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98c7, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:03:26 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="1000030000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:03:26 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6b92000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:03:26 executing program 1: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/99, 0x63}], 0x1}}, {{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001280)=""/238, 0xee}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000001380)=""/66, 0x42}, {&(0x7f0000001400)=""/98, 0x62}], 0x4, &(0x7f00000014c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000001500), 0x6e, &(0x7f0000003b00)=[{&(0x7f0000001580)=""/91, 0x5b}, {&(0x7f0000001600)=""/107, 0x6b}, {&(0x7f0000001680)=""/175, 0xaf}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000001740)=""/62, 0x3e}, {&(0x7f00000037c0)=""/130, 0x82}, {&(0x7f0000003880)=""/72, 0x48}, {&(0x7f0000003900)=""/216, 0xd8}, {&(0x7f0000003a00)=""/35, 0x23}, {&(0x7f0000003a40)=""/140, 0x8c}], 0xa}}, {{&(0x7f0000003bc0)=@abs, 0x6e, &(0x7f0000003c40), 0x0, &(0x7f0000003c80)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000003cc0)=@abs, 0x6e, &(0x7f00000053c0)=[{&(0x7f0000003d40)=""/73, 0x49}, {&(0x7f0000003dc0)=""/183, 0xb7}, {&(0x7f0000003e80)=""/214, 0xd6}, {&(0x7f0000003f80)=""/219, 0xdb}, {&(0x7f0000004080)=""/255, 0xff}, {&(0x7f0000004180)=""/189, 0xbd}, {&(0x7f0000004240)=""/211, 0xd3}, {&(0x7f0000004340)=""/98, 0x62}, {&(0x7f00000043c0)=""/4096, 0x1000}], 0x9, &(0x7f0000005480)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f00000055c0), 0x6e, &(0x7f0000006640)=[{&(0x7f0000005640)=""/4096, 0x1000}], 0x1, &(0x7f0000006680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x7, 0x0, &(0x7f0000006880)={0x0, 0x989680}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x284002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r1, &(0x7f0000001780), 0x8) 02:03:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xe148cd785a7d1d92}, 0x5080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r3 = accept4$unix(r0, 0x0, &(0x7f0000000040), 0x80000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) openat(r4, &(0x7f0000000180)='./file0\x00', 0xa00, 0x100) 02:03:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98c8, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:03:26 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5793, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:03:27 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:03:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e94, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:03:27 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="1000030000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:03:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101242, 0x44) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) read$rfkill(r2, &(0x7f0000001780), 0x3e) 02:03:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6c92000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:03:27 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="1000030000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:03:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@uname={'uname', 0x3d, '}*(\'-\xbb-:}&-%.'}}, {@version_L}]}}) 02:03:27 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:03:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5893, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:03:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6d92000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:03:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98c9, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:03:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5993, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:03:44 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, 0x0, 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:03:44 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="100003000000000020000400"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:03:44 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4, 0x5, &(0x7f0000001480)=[{&(0x7f0000000180)="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", 0x1000, 0xffffffffffffff7f}, {&(0x7f0000001180)="313feb0c3d28fc7c71d04c60150f6933bdd2f407e822b254c5a8d10a64921df43bc5022cb10539021447a01de7149bfa921216e2bc4a0466f4596776e026d776e98dc6e6db7c2991f4293c21891a577761b4ee5a3d170cd808874752a9c6c48b7c0ce4abf8e5899c978886ff98e5c264affac7f8ca0bcb715cf36949e1060ad1a38b89eee5cf71b756d16f66c9e93ad8a1a8def68517862a35cfc99bb1d1756148a7deb366ca7df4dd511d96432c3e38324e422eb743b3c122cabdf7280e8b3cbba683802923d73c7f2a9a235670d5dfd0062c", 0xd3, 0x78}, {&(0x7f00000000c0)="9e9a46c8304ca2dcc07288d1202c059bd8a150fbea0d1543b2467a9e9e6ed55d5530f21b5704861252b160690bea4ea564071536e770e4dc4fc3ee9f", 0x3c, 0x1d}, {&(0x7f0000001280)="02edfe381b7d59923759ca9ca14e9928e0ca5288d657a016152c43dfc7daa369fe81ec9035edf21aa31e6d878ab51aa79fb338a0123e04c827eff02d93d9f7dcd144d86bcc69b6653068a6eebd06742e6fd17e0ebda037fb4c6316ae9a69d3e516e1a64553a5bd4e64307274b15e81813cf7faa29495766f38ed4d924ddf13d563917b95b3ac2b1115ca0287e7b127c40d0de6f4222812bbd475ff396204fa23e9c6b72396cc8e8231a83df5675ca71453c1aa381c0d2f75c1188bd738e70afbe11e09c675d92c1d2da06b436fad698b82100fa2f3c840858206bf7388f34829d0eb967eac882fd4c2945c842ceb7f1a0daba9", 0xf3, 0x9}, {&(0x7f0000001380)="2cbe199dc3d2655751febb08f707795080d2119036ce203f34b1efff7d0e76e6d70222b2ac4399bb2ec6b79705f7f0b71a5d6f8d82ecd2563f36e3e23a8a0b3bd60b3a5ee65a92acf1619c8fb0d41488040096c797c9d0d92dfa1e212f5f373acc380bb14239319c838448bfb47f9b6a4a2b4a94fbe5fbf89ef14ab99916b5db10984b27470e4822d376cc258aa0ab5a7668e9c441c8c3becf93a18bb4b3586774c84c722d33a9b805cb7dbec09a41d40ee5fcc7b4f4eae290c3ee082882ec7a8a4400390032", 0xc6, 0x9}], 0x63, &(0x7f0000001500)={[{@shortname_mixed}, {@shortname_mixed}, {@numtail}, {@uni_xlateno}, {@shortname_mixed}, {@nonumtail}, {@shortname_mixed}], [{@obj_user={'obj_user', 0x3d, '-'}}, {@audit}, {@euid_gt={'euid>', 0xee01}}]}) openat(r0, &(0x7f0000000100)='./file1\x00', 0x4042, 0x110) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000017c0), &(0x7f0000001800)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$chown(0x4, r2, r1, 0xee00) mount$9p_unix(&(0x7f0000001680)='./file1\x00', &(0x7f00000016c0)='./file1\x00', &(0x7f0000001700), 0x851000, &(0x7f0000001740)=ANY=[@ANYBLOB='trans=unix,privport,afid=0xfffffffffffffc00,loose,uid>', @ANYRESDEC=r1, @ANYBLOB=',rootcontext=sysa\\m_u,\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) pipe2(&(0x7f00000015c0), 0x800) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001640), 0x18801, 0x0) read$rfkill(r4, &(0x7f0000001600), 0x8) 02:03:44 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r5 = fcntl$getown(r0, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000640)={r6, 0x0, "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", "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"}) clone3(&(0x7f0000000300)={0x10280, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x7}, &(0x7f0000000180)=""/50, 0x32, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r3, r5], 0x2}, 0x58) 02:03:44 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e95, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:03:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6e92000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:03:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98ca, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:03:44 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, 0x0, 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:03:44 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="100003000000000020000400"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:04:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98cb, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:04:02 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) accept4$unix(r3, &(0x7f00000002c0)=@abs, &(0x7f0000000200)=0x6e, 0x0) openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x111000, 0x137) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:04:02 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5a93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:04:02 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="100003000000000020000400"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:04:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e96, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:04:02 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, 0x0, 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:04:02 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6f92000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:04:02 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x30b040) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000003c0)={0x3, 0xff, 0xa, &(0x7f0000000380)=""/10}) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x0, 0xd2e, 0x93f2, 0x3f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) execve(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)=[&(0x7f0000000180)='/dev/vcs#\x00', &(0x7f00000001c0)='/dev/vcs#\x00', &(0x7f0000000200)='+&@-]\x97^\x00'], &(0x7f0000000340)=[&(0x7f0000000280)='-#:\xbb&/{-\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='/dev/vcs#\x00']) signalfd4(r2, &(0x7f0000000400)={[0x60000000]}, 0x8, 0x0) read$rfkill(r1, &(0x7f0000001780), 0x8) 02:04:02 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="1000030000000000200004000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:04:02 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:04:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) fspick(r3, &(0x7f0000000000)='./file1\x00', 0x1) 02:04:02 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5b93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:04:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98cc, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:04:02 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x7e01000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:04:18 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="1000030000000000200004000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:04:18 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:04:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98cd, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:04:18 executing program 1: ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x4, 0x7, 0xf000, 0x100, 0x0, 0x4000000}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) syz_io_uring_setup(0x17da, &(0x7f0000000180)={0x0, 0x4c3, 0x10, 0x2, 0x285, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:04:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x10e005, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69782c6163636573733dba50885db6f7d3205c649c204780c4176d080e9c2b38a1e949b563dff2f82febc53bb0e4179a44ac891be9ffa5249f2985adb9f7bba69c62adcd09120f348080679b0c", @ANYRESDEC=0x0, @ANYBLOB=',version=9p2000,version=9p2000.L,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) mount$cgroup(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x8, &(0x7f0000000680)={[{}, {@noprefix}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@cpuset_v2_mode}, {@subsystem='devices'}, {@xattr}], [{@hash}, {@fsname={'fsname', 0x3d, '{-'}}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}, {@hash}, {@uid_eq={'uid', 0x3d, r1}}, {@measure}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x40) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000480)=0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x7e, 0x6, 0x0, 0xc3, 0x0, 0x200, 0xd483f34863c359b4, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x6, 0x3ff}, 0x800, 0x8001, 0x5, 0x2, 0x800, 0x9, 0x1, 0x0, 0x1, 0x0, 0x6}, r4, 0x2, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e7360ee3e7afe457f2b6f3d85cf0a715c0000000000000009ce9a81cd4619b9df79aa2bee3415", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',ve,version=9p2000.u,version=9p2000.L,\x00']) 02:04:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:04:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5c93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:04:18 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e97, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:04:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xe4ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) [ 1497.113200] cgroup: Unknown subsys name 'hash' 02:04:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244080, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:04:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5d93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:04:18 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="1000030000000000200004000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:04:18 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e98, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:04:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:04:18 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401ef80d, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(r0, &(0x7f0000000480)='./file0\x00', 0x2, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440), 0x83228, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[], [{@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_type={'subj_type', 0x3d, '.pending_reads\x00'}}, {@context={'context', 0x3d, 'root'}}]}}) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000200), 0x8080, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_user}, {@nodevmap}, {@cache_none}, {@uname={'uname', 0x3d, '.:}\\,\')]'}}, {@mmap}], [{@appraise}]}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r8 = syz_open_dev$sg(&(0x7f00000004c0), 0x69, 0x5a1900) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r8, {r1}}, './file0\x00'}) sendfile(r7, r6, 0x0, 0xfffffdef) openat$incfs(r7, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x4) 02:04:18 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:04:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x8000) read$rfkill(r2, &(0x7f00000000c0), 0x8) 02:04:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5e93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:04:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000040)=0x80) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:04:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98ce, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:04:35 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xffff000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:04:35 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e99, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:04:35 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(0x0, &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:04:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0xff, 0x8001}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pread64(r0, &(0x7f00000016c0)=""/186, 0xba, 0x3ff) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) r5 = openat$cgroup_freezer_state(r3, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000180)={0x0, "c1951bf080aa41aa38a208dd4f3e8742"}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001180)={r6, 0x55, 0x9}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000001640), 0xfffffffffffffffc, 0x200000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000001680)={{0x1, 0x1, 0x18, r8, {r1}}, './file1\x00'}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000001580)={0x0, 0x80, 0x3, 0x80, 0x20, 0x80, 0x0, 0xffffffffffffffe1, 0x20040, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2080, 0x2, 0x1, 0x2, 0x4, 0x7, 0x8, 0x0, 0xff, 0x0, 0x1}, 0x0, 0x1, r4, 0x1) pwritev(r9, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:04:35 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="100003000000000020000400000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:04:35 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(0x0, &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:04:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x5f93, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:04:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = syz_io_uring_setup(0x101, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4003, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7ff}}, './file1\x00'}) r7 = getuid() sendmsg$nl_netfilter(r6, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x18c, 0x0, 0xb, 0x401, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x2}, [@nested={0x107, 0x35, 0x0, 0x1, [@generic="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", @typed={0x8, 0x23, 0x0, 0x0, @uid=r7}]}, @generic="b4210cbec6a3769edba4d39b89a85476738e5116e7ce5a97f1cf2b5870b53c7f5b388a2255b2e12ec652a69e0d65ac98f1ed0c308c477d2694fb43d6eae57bb78c02dce6947acf629a10b3a8ce46a707ebfea01d472ac2449287e413bfa17494939007d669b553dbc1dbd204d0b2"]}, 0x18c}, 0x1, 0x0, 0x0, 0x20040}, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:04:35 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e9a, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:04:35 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xffffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:04:35 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="100003000000000020000400000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:04:35 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(0x0, &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:04:35 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xffffffff84800000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:04:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000200), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000280)=""/91, 0x5b}, {&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/230, 0xe6}], 0x4, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x2040) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x10050, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:04:51 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6093, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:04:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat$incfs(r1, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x2, 'macvlan1\x00', {0x4}, 0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r2, &(0x7f0000001780), 0x8) 02:04:51 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="100003000000000020000400000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:04:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98cf, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:04:51 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:04:51 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x2, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:04:51 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e9b, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:04:51 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x7, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:04:51 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:04:51 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6193, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:04:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98d0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:04:51 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:04:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:04:52 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="cd4b17baae274e1a84ab93e4442e16c030ea24f6762052c1874a5667def9787d91f4b58c110a3835e2f3b86d9b6f4b9ed8f4fdaea20baf3b62c76ed5d1ae56e3d885f2f062c73ad911db1b10d67c07b020651da00762d8fb53e5caa4cbccc7fbaba45470d5a58d5b6d84b39a74614d", 0x6f}], 0x1, 0x7fffffc, 0xfff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) read$rfkill(r3, &(0x7f0000000140), 0x8) 02:04:52 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:05:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98d1, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:05:10 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x6293, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:05:10 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e9d, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:05:10 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x9, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:05:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="747246a07d7ce52c1e25adde0c90fe41846c23646e6fa9c23856c492ef8d374b6147d5ffb1b6dca45b28fa769bd82e0b53e0be036820a0a12447d858574693db03aef650dc3bf78bdbd7b98d1cb93ca75aedeacf4ec78d680a3d3597cdef14be652bc68b55e5d4dce4dc8d625dee4e3519422cb7548f0ad2cfea17ca9565d0873a9196dde8f615a61b1ab1015dad2108aab1c87a3f60c5025052adbba1b7c455acd8007ad6478164e7f63e4bfc24", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) 02:05:10 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:05:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="d90cd0235643b36b00", 0x9}], 0x1, 0x7fffffc, 0x2000) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:05:10 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:05:10 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:05:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0xa8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x8) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r5, &(0x7f0000000040)=0x5, 0x200) sendfile(r5, r4, 0x0, 0xfffffdef) openat$incfs(r5, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) read$rfkill(r0, &(0x7f0000000000), 0x8) 02:05:11 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:05:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e9e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:05:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d366533b359657ba0eeee5720f7dc028e446550fcbf5f5f4373b38186844a27581aad38a3d1f1d5f9f1ea66c157c6bc0dc9daba", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) 02:05:11 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xa, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:05:11 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3a, 0x0, @tid=0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"24829e07e1fe4cf4e3557262cef42c54", 0x0, 0x0, {0x8, 0x491}, {0x6, 0x101}, 0x10001, [0x1, 0x9d, 0xe6cd, 0x401, 0x7fff, 0xffffffffffffffff, 0x2, 0x37, 0x80, 0x9, 0x80, 0x88a, 0x0, 0x3, 0x8, 0x7]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000340)={{}, r2, 0x0, @inherit={0x88, &(0x7f0000000280)={0x1, 0x8, 0x8, 0xff, {0x24, 0xffffffff, 0x5d7, 0x6, 0x8a}, [0x3, 0x200, 0x1, 0x40, 0x2, 0x101, 0x100000000, 0x0]}}, @name="fc2ac688dc032b52e78baa04260ca10ae22b9a57a16c42092876283878184101d8cd117d508d6a28dfe740d9ab79755f56395b843df72d614b61cbc18b30b32af273fe77bd1e432abdeaee1c143f532572029bdd6d8026995c05f3916194e1b318e019580badf16309c3a98d925ffdaea31af63ff711d31e176117d810da3999dacc97c2648d70822f9fd01e40826decc4d263d1ee2b60e27756e94182642e4f2c5b32509188730dedbc9453ed9371b85a207d4b88596516338376441d704ed21c56bda6071ebf8013ec3e8eb87be69e15751f2cee909a33bacf10479640150c895cbf33ed0ee9db1058ed35d2a14e1bb7d01564e9d666f4c6c18a1f5cea1e5a353b7812018e7512abba1703e1b30f8bef0a70322592cf9522b85f3066dbdbfdfb73ee98bc8d586f57572a4a1bcad726189fd3266c8d0f997d589421d139643d220c6dac432ceaf1134dd4162183d31d85cb3a56ab2445ebdbe26d8c24f53d9f1956570e403c7453ed585924c328c374ee2f0b0717d5f70eecbe27eaf2fecbb5556cc567e2fb4e82f54a4d8a937fbe7c0d3d2dc6494415c8b324b9918fb8a982c05a3e0a93d5f91a928badb25aee58afcbc0ac616ba7535a1701151dbc0ebab3fafaefbdcc8a1f18189cda40cc3de23256218ddf31adc8218813042978d5be939e4bbaf4d17ece98597d8e1f175edb7fcef00edd3ffdcd1691d43468a2efd7a09d0bb5e104d1dae394d5caf2381e7f20c16a4250c75bd7e716c10ff74af425a1d184d27a956cfa9c0684edb744faa130cddfc9ca0bfe22ecd236495f2785c5da311f2fee1598c78f35ebed7b8b883931ce3bc675fa61466329a91584e9ed99cf474b54165ad6762d7686e79399c50020cab3aef97b82459dc91690d13d052a9c4200ad5c9481fed7f52d97d263685e21eeb0f0025e105d9ae3c10bd8ba46aab0f00bb4ebe58c6fd3b2a140cdd0e2de1c845c38ac8bba6e5620851c0f463ba2708fe519b80f5d0a5d1ec18ea87cb9bd5ecef13ae6cf9fa9377a2f74ea1a05d6bcffeee3f26ca130f8c1593245ace5c18366021ca81f326146ee43be108345ad08db00419f66b20abbd3252722fc13a831c11a573d3a69e80e670a1ae86386f19c767f114a6f86dbead35550c87231923a16f1b1c00b309fb56b17cb83f759072a8c8c12b6d9f4d93244c06b1c0076a07caa468319c57b8c8d51bf0b4966a9e36e6c474dc8046f74f21d40adf638f87988d9b77e79a9296b99e6d6b74d6f74c3fb93b84c6b87d3f29df4f461ac9c142b423b162719eaa41b7c30894e680cc8a6802e5b5d342f480170e7b7d72c5b8d64307b2a62600f2a774ab5202e65c30e81f773dc6a78e8ff0d5bae79aae0380ab090a09bed308e076bf71b45ac81a6476e12ca93581ce21e229f81c7b9086ad882e4f92cb42c37816ae31c7aeac1fe566881dda40daf7e184cf4d19cf519fedbf479c98762ad47ba0c22bce842e430b7c7a22cb0d823c85a8200aa414ae62645b947be035e42f838a764fed77ec89e31c53086d1e5823fdac9f932f936e2e1d3d9d51b9a6a51b4a60b6a0778280e0cd7163d87602787eaa05f21631cb24368e6c9a4d8af981424db568ab32d38f8ea5e994a0dab3214e5a3c5721dd38dfb4810a490da5c835769a9bfc4d43d53883161ee5c626b043cb2b13450681d05daf145fa75bcf4d1589575ab2b1afc3cc11af55cab7ccf40bc368657eed19db3c82ac42e4cab21d5e5fa2e9cd7723f4be8e562a7f2914df781b28cde6124b31810e904695cc3bb95b62c3fb806608da0734f158972f0ae179ab9a6541d855d48baa3dc72edde15509869ec6f6d7aeeac3c54a14c845fe240710b51172be34b91be9dee1595946696a7c37291fc2f1f2b65ebfd01b835a2f6cae4283069bd301d2bae5fb42b33a27a04b5a020b73cf109b9288edcb4d55c3ad003be61de8f2f9b2522b409d758de9e62f1d3afc72b7d0515ca59834024e9fa079bffc62adf03f5aa297d99b03cbf6c3d4485583089e95685544f3b311ded135c4c42dc0384405a53fed1de99a3e584cab83f3f851073666c83d4b367bc09bdd6c80a67c96bc7f275b9937e3563fa49e9e5a21f3dc588ea233ceebfc105f78c5db9edcb90cbd3ece7fd10a5e208b866e125cd090eeb731c24d9908597b821efc4ff2eb0a0bd38b9fb00b345049c520e27c431f10a3db3c20cc825d3e6c9488d389776481ee624cee4460532ec204c12ce787648337090cc38060c01e029ec8279c6e51113c4e927963d6ee1fae5eacf2d4c4e0b4de3a7f21b8116e191d04051f81d0295f254320a08951d07a53c370a818a10e01ec7d213ccdde9573587300266bc73d3590875642b5a83a14144822cf23f4364c4015ecc93dcefae1f822142ab170d7e8b29bfcc37592d2556cb873ec70357ade37cad4e662b150f65f9cb6d6f6a1860a2a1c2b7cf524d798c16551ee1b21f941bf6a4c0ddd353de8be0950e2e8cab143d1153833334e17e9a1e884ff60779b1a0ce1e5c1d48ec6d074d0df418935a1e712bf04d0d6ad305428c8a79853aab59ca9dfaf9d4f05d5fc1d4dc0e45ad1c1fc2a7f17bedd0f7717e079f2e8866334dba5d320db347edf7c33918cdc45b57d86de689a0b63c7068c49bbea3afb97feb71a0645d77abc6e0d1a9fd8488d3a06b90ab2b6296f7f404bfa721d8bae48d6f0fe1006e5fa9e1a267877ca915d3a13bc4695991b0baf27feb9c1ed8c5d84e6f037934da50285b3cd6e33a4d101a70ac21f51e897af3911ae1c1fc26f74c37c5ba7c3379f5c535e2fbb20657428665363d1217d2711b34ec6844972d5e4219df8b20a6d88128d58d9d76115cbae17849731eec4fe95a6c041a4a4cd352b3e4db9e2667d9d7836f129b8732e59c39e37d35e029715bef268511ecd2d7ac57d2e02ee5925dd1e11e3ac24c4a60418fa174c5929070b3676e92c3bb1ec5f4e7cd5ae54a9214b8db90b8767694fce77532c4188d4a190ac4ecd0007ba0f9f3926566c3e002ae7946c20821e68b83a2de691fa9a95a605e2bf1cb7c23b72548b9c5aba8446e372bbbcadacd08345970312cab5633afe5b564dccec2b39a4b228c1cd5ac55369198bcbbd2a8d71f979fabe96234eca1cb18be095621c0b268995e26bd8fc9e7390b91d523eb2112f443f9e12919ec873c0e12cdda1e33bd87e2526783fe0f25e3af5a726a749947fee9d11573e80184d23204c916d21fa2039cfd453d4ad2ea7f2bd8088c863b8df8ea60326f055ef29e3205a8c5de23c6fae9f4e6c6f9e22f8f9c70ff8c7edc5a4142c4b77581f19c61af1e5baa51176a2b126023bc6b69526d430746fa7359ca4c519ffc0a6b39cdc548995a2bd7ffc68a036026d29336ea6862f632f31e0d6fb88d4eb0d791b42d0f184d4c0495ab6010bd4d3734bca4a32e51bb8ab3a05832fdd265d987529ac05b07222d49e26c36bdc0a47fe7098841632da25c9f07da815fa77a6489bb35f6edce0825806e677ace511e965b0299491876df9edbff1f443b3c3acab669ba2c7d31ff9594ca0cfacdd9d068f00a1a5be7e6f0b535629bdcd25b848d2bec57a0d69ea2da5d0692710dd6384119ed1cdcd5fb8e41a0fa0c6db21d0ca96732695b6572bdf3e94d836284442225ecec39d7e76467e8a377e47b08804e2a23d911b5a0abd15c67d11609b8835ca3439528c91d8a85acf8206273250d8aa997db57b83cc8b00b6045c02c1d00367b9a30d212a548b7acf6b309e562c3e6dd5cb2bca84557897b43e0f0e51c105f2edfbc2411fff136880e50e00ca1a05fc1fdc74c145696c04e4e6fbe1e27e4a0bfbed2e4ae783798daa4bf76681e32f268987553a14b2819735c1aa7d475f10ce0276abde36f3390114767f9ea1cacba3d3f045df9a74368ab1bffb7448df401e573fad7f25739fbda639dff666afe067cbe24ba00104bc2be77e8fde7ff5e77593a8022e838935a758335252a11b8c09a76058ee7f59305e46360ad74061043ca39311aa366f647e0de0b6077a57d264b3fd97375e6fa324207d6356c5d5ae7d12933fff565fb1d3bd1001914f38999d08b441afbfc22549c7e18c265102252c8f469c5d6e415d03c929cd2b8177d32a681f9237144abf17c8b197904ce56aaadd73ee14c45b55716fa203a3228e0c8d5b0d15986c01d4ce1d925bb0c1e02c41b2c671aba575dddbac1a7390b70c6e1aa2bf79faaf71291c3b2a385016c7e59c5fbce5fbb03415b0d91698a6062c3a2e372db98cdfcbd7f95a7f3c70aa869e4effae4a88c4a62ce1b4c7431b417f2ce88370dba32fa796644bccfd3bc260e7eed8547651e2db3a761c6526a5c8e7ac3001570760fb641b9dbe3eaaff47b2f4e1b9d0f4fa75ed432e0e482a5e8b040dafa33f45d98d4668cdcabeb052d5076e5175659345a5cd6af67a5a3b307c7e2e813be80d4d59407d57b42637226eb2ccbb2bea821eff68a64f4968b8574831dccbafb5ec52b49a208ba8915fe56fd39a31f92bad00ad6ac9394f4709582841c80ce86e9f381f71612bfe71029f2b685840b6ad89b771046ca45013c99e019a9ac5cf78320568208693d0082d3560ca6427cdbfe0a45f2afbf8776bc88e7c4535cb578b777a4138dbc9fed824fa671c2f182a096ec97bf33458de687ff69aa072be2b747f8fe230ab11c8a0b925899b7b28d5a1cbc336a92540a043338f2ef19761662d8e8b1474626047c6d27df4e9b5aea6ad254e64347530042dcd5cca1366c8e20fa08f6eac6804edf9bc633ddb2264df50ae6b4d2d040ef79ab516f2c57f3a43b105945a61e942750a28ab3663f3b2394e1680d69ee7c58b0688d83deabc741b84d901683fb6ec75544008c85c7e806eb15022c229182e7c5ea8ca4d32484e2f90630b60508ef9b6b29ddf3dd6ceea90186df597c1552e3c001251d7c4f56105085d4979a64e2495ec3a2a9036c71a1c5bd5a046b5344fbdad33aead33e4dc475fe704ef1e32c4aa1f0c0573e6f0034f45904bc5a6aa3b7bf28b477873997a154f91cadb40c141fb2a1931e6b6e235849d101505c00c572c3c416021f7a62de85fac6b346fb5506ae8934a47149de72e5c193ecf2a253b86e07ce89a3f17eccc602a050a4c3dcfbf30ae77e3685266672c8865359b8e2ccc2114fdd26ab3b5e5bb03de02d3815fdbf4d68787eaa4478eba12f87f84e805a79bafe192d294051930bf01f4f22ca6043605c09b32dc7645007f4efeab6db5349fa2db1cd60c21cfa48aed792ae6e2ed3cb17dd1bb93bda3b2e618c8db470943e1f31a5d5c57fac2ad65c73605290954733271049480214b97175ca21fe5878d5e33825c6d0266dff8be8a4a6740dce10d8293823775edf7f460946fb857820ba36724473bf3d871de7dbfbd36c298bc7e91a6bfd0b45017aef702df37f51155b4b82acc818ca1adc69288358c53ec5f4971b22a962f73edc8f40b9620583ccc23771f9f7cdfe572a5c66a679af41413bbdae3f4b94741e63b39a5f83e951c282f37391856268ddae6ac7aa5d0bd56dd7546ae895d838957b17e3a77381431930f7405892f4c0a750d45276cd1f52fdc8a09a4cb48714ab23e7f23466a3230d3d192dfd3f1fbbe85f59fedeb66b04bbee102d0a63f3aeb726e1fc80a7d39ee8da243a44340e5d76eb957308ab22dbc036c8d298e411e8138d93e3c562ddab41fdd5b706bc1089bb6149"}) 02:05:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8e9f, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:05:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98d2, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:05:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8084, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:05:11 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) [ 1550.281927] 9pnet_fd: Insufficient options for proto=fd 02:05:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8a05, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:05:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98d3, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:05:27 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:05:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = eventfd(0x20) lseek(r2, 0x400, 0x3) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:05:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) r2 = getpid() perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r2, 0x7, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000001800)=@abs, &(0x7f0000001880)=0x6e, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r2, 0xe, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x81, 0x80, 0x3f, 0x0, 0x0, 0xffffffffffff7fff, 0x63a0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf1b3, 0x4, @perf_config_ext={0xffffffff80000001, 0x8}, 0x4000, 0x7, 0x8, 0x4, 0x100, 0x800, 0x7, 0x0, 0x1}, r2, 0x5, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/bnep\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76010001000000d20c871fa2263134be07be30272e4c2c766572736b31ad0d61fc7cd130302e752c76657273696f6e3d3970323030302e4c2c000000000000"]) recvmmsg$unix(r3, &(0x7f0000009300)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000440)=""/252, 0xfc}, {&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/23, 0x17}], 0x4, &(0x7f00000015c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/13, 0xd}, {&(0x7f0000001700)=""/113, 0x71}], 0x2, &(0x7f00000094c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1cd00000000000000001000000000000000f8576cf58138b8ddb1a888312b8b2f028c1f546c501453f2664d63eba93260d1166a339183cb009abeb7e92c0a0755da13f0065c8f9527d56302c19344af60b81a3db19b0a2f7b3248901e5ffe6d42981afc0dd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e5ffffff"], 0x110}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001980)=""/58, 0x3a}, {&(0x7f00000019c0)=""/140, 0x8c}, {&(0x7f0000001a80)=""/208, 0xd0}, {&(0x7f0000001b80)=""/233, 0xe9}, {&(0x7f0000001c80)=""/155, 0x9b}, {&(0x7f0000001d40)=""/130, 0x82}, {&(0x7f0000001e00)=""/202, 0xca}], 0x7}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001f80)=""/200, 0xc8}, {&(0x7f0000002080)=""/219, 0xdb}, {&(0x7f0000002180)=""/135, 0x87}, {&(0x7f0000002240)=""/179, 0xb3}, {&(0x7f0000002300)=""/80, 0x50}], 0x5, &(0x7f0000002400)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000002580)=@abs, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/140, 0x8c}, {&(0x7f00000036c0)=""/241, 0xf1}, {&(0x7f00000037c0)=""/99, 0x63}, {&(0x7f0000003840)=""/206, 0xce}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/152, 0x98}, {&(0x7f0000004b00)=""/26, 0x1a}, {&(0x7f0000004b40)=""/10, 0xa}], 0xa, &(0x7f0000004c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000004d00)=@abs, 0x6e, &(0x7f0000009100)=[{&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/109, 0x6d}, {&(0x7f0000005e00)=""/233, 0xe9}, {&(0x7f0000005f00)=""/4096, 0x1000}, {&(0x7f0000006f00)=""/132, 0x84}, {&(0x7f0000006fc0)=""/4096, 0x1000}, {&(0x7f0000007fc0)=""/126, 0x7e}, {&(0x7f0000008040)=""/4096, 0x1000}, {&(0x7f0000009040)=""/174, 0xae}], 0x9, &(0x7f00000091c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100020000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x140}}], 0x6, 0x20, &(0x7f0000009480)={0x77359400}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) write$P9_RAUTH(r5, &(0x7f00000017c0)={0x14, 0x67, 0x1, {0x20, 0x1, 0x1}}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x7) 02:05:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xb, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:05:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8ea0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:05:27 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:05:27 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:05:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9331, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:05:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98d4, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:05:44 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:05:44 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:05:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9332, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:05:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="ea8cec0697bb531c96874f870a91d5c8afd9fdf586193ab990d7376e94d69dc018982f82ef61f6266c3c4cde319d8e5024bc828eaf68f801f2b12e19c0111c660169f0353579e236c81880614f6b980804641612df00a9bab1afafbb24aa237d9932ee578a63f7b7bd9042cb29a3c988f2a3649cb1a17067a568e4c0441821d7c105972a3d3e3254dbadc43796f8439e17172497638365862eb1e6ac58979837c7cc3ed253b69e52096764c22ab9bcd05d36429db8ee798649181a1c6c562c7d557b34e100c124627c1f7eb232e72c3defa159de483c89c3bf7e6a338375dac3553872b0a1e30ea8ea873d1fafcbd15a31d94ab9a458", 0xf6}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0xfffff794) 02:05:44 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8ea1, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:05:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c7266646e63e4013aedc4f063a16f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) 02:05:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x10, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) [ 1583.236010] 9pnet_fd: Insufficient options for proto=fd 02:05:44 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', 0x0) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:05:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x42c00}, 0x0, 0x0, 0xffffffffffffffff, 0x8) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x121363700, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:05:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x17e, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:05:44 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:05:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x553, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:05:44 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8ea2, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:05:44 executing program 1: ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000006c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000001780), 0x8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004a80)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/80, 0x50}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/195, 0xc3}, {&(0x7f0000000400)=""/215, 0xd7}], 0x4, &(0x7f0000000500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x178}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)=""/20, 0x14}, {&(0x7f0000004d80)=""/126, 0x7e}, {&(0x7f0000000740)=""/145, 0x91}], 0x3, &(0x7f0000000840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000900), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000980)=""/35, 0x23}], 0x1, &(0x7f0000000a00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/153, 0x99}, {&(0x7f0000000b40)=""/10, 0xa}], 0x2}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000c40)=""/44, 0x2c}, {&(0x7f0000000c80)=""/205, 0xcd}], 0x2, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000001040)=[{&(0x7f0000000ec0)=""/32, 0x20}, {&(0x7f0000000f00)=""/106, 0x6a}, {&(0x7f0000000f80)=""/139, 0x8b}], 0x3, &(0x7f0000004e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000001300)=[{&(0x7f00000011c0)=""/57, 0x39}, {&(0x7f0000001200)=""/206, 0xce}], 0x2, &(0x7f0000001340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001440)=""/31, 0x1f}, {&(0x7f0000001480)=""/234, 0xea}, {&(0x7f0000004ec0)=""/4096, 0x1000}], 0x3, &(0x7f00000015c0)=[@rights={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000001600)=""/217, 0xfffffe03}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f00000037c0)=""/80, 0x50}], 0x4, &(0x7f0000003880)}}, {{&(0x7f0000003980)=@abs, 0x6e, &(0x7f0000004a00)=[{&(0x7f0000003a00)=""/4096, 0x1000}], 0x1, &(0x7f0000004a40)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x40000000, &(0x7f0000004d00)={0x0, 0x989680}) sendfile(r1, r0, &(0x7f0000004d40)=0x1000, 0x1) 02:05:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9333, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:05:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98d5, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:05:44 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', 0x0) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:05:44 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x8a2b7b24d4c78dfc, 0x1000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd2004, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@debug={'debug', 0x3d, 0x7}}, {@access_client}, {@uname={'uname', 0x3d, '\v)%^[&-()^/'}}, {@access_any}, {@access_client}], [{@dont_measure}, {@pcr={'pcr', 0x3d, 0x2b}}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}}) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xab, 0xfffffffe}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x40000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@appraise_type}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x65, 0x62, 0x62, 0x38, 0x66, 0x61, 0x32], 0x2d, [0x33, 0x38, 0x62, 0x37], 0x2d, [0x63, 0x39, 0x32, 0x63], 0x2d, [0x33, 0x63, 0x39, 0x62], 0x2d, [0x61, 0x30, 0x63, 0x39, 0x64, 0x63, 0x66, 0x66]}}}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, 'dont_measure'}}, {@uid_lt={'uid<', 0xee00}}]}}) 02:05:44 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:05:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xcc1c0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) openat(r3, &(0x7f0000000000)='./file1\x00', 0x440080, 0x42) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:05:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x700, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:05:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98d6, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:05:45 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:05:45 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', 0x0) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:05:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000000)) 02:06:02 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9334, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:06:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000180)) ftruncate(r0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) r4 = inotify_init1(0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="35070000000000000900000000000000020000000500000004000000000000000400000000000000050000000000000002f30000000000000000000000000000000000000000000010000000000000000000000000000000020000000000000000000000000000200500000000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000200000000000000000000000000000000000000ef41896500000000000000000427000000000000000000000000000009000000000000000200000000000000030000000000000000000000000000000000000000008000"/254]) signalfd4(r0, &(0x7f00000000c0)={[0xfffffffffffffff7]}, 0x8, 0x800) write(r4, &(0x7f0000000000)="4d398bc4bda96db7cbc83e39280080552add2bcf90e5902df3f9e63674e46219fc7b767051a2e3460bb3b5d3e94591a895234c358153cfed0db91b33632323b27fa4090420cd92552a0250350fff276dd13bbb3a17", 0x55) 02:06:02 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:06:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x24, 0x20, 0xcc, 0x0, 0x9, 0x800, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x80, 0x8}, 0x3001, 0x7, 0x1, 0x1, 0x0, 0xffffffff, 0x1, 0x0, 0x56d, 0x0, 0xfffffffffffffffb}, r2, 0xb, 0xffffffffffffffff, 0xe) 02:06:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98d7, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:06:02 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(0x0, &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:06:02 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x900, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:06:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8ea3, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:06:02 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:06:02 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xa00, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:06:02 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(0x0, &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:06:18 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) read$rfkill(r1, &(0x7f0000001780), 0x8) 02:06:18 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:06:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9335, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:06:18 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(0x0, &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:06:18 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8ea4, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:06:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98d8, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:06:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xb00, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:06:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) r1 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0xf9, 0x7, 0x9, 0x0, 0x6, 0x100, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0x4, 0x9}, 0x40, 0x17b, 0x6, 0x7, 0x7, 0x4966, 0x1, 0x0, 0x8001, 0x0, 0x9}, r0, 0xe, r1, 0x1) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:06:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x1020, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:06:18 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8ea5, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:06:18 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:06:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x60, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472376354002f0000e1937f08eb61", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) open(&(0x7f0000000040)='./file0\x00', 0x400001, 0x1c) 02:06:19 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:06:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x2000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:06:36 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:06:36 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:06:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98d9, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:06:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) clone3(&(0x7f0000000440)={0x1000cc00, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x3}, &(0x7f00000002c0)=""/158, 0x9e, &(0x7f0000000180)=""/15, &(0x7f0000000200)=[r3], 0x1}, 0x58) r4 = getpid() perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r4, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r4, 0xe, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x81, 0x80, 0x3f, 0x0, 0x0, 0xffffffffffff7fff, 0x63a0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf1b3, 0x4, @perf_config_ext={0xffffffff80000001, 0x8}, 0x4000, 0x7, 0x8, 0x4, 0x100, 0x800, 0x7, 0x0, 0x1}, r4, 0x5, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x4, 0x3f, 0x4, 0x81, 0x0, 0x3, 0x44000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0xd5996d2050109c2a, @perf_config_ext={0xab, 0x4}, 0x1, 0x2, 0x10000, 0x8, 0xffff, 0xe000, 0x2, 0x0, 0x5, 0x0, 0xd903}, r4, 0x10, r0, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:06:36 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9336, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:06:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="7d7ad997b2ee0345a800000000960a0daeb3263028ababbe6c1692ae0ad99a8679939bd6bc3419891f4d2b79324dc7b42b8d65e226e820130d468d637f0253dde998b6b27797401303ce8d57f36ad811aea330d21f1b9c320071a99814bd9193ffdfc7c1356642bef40926647ccc5c966b73f1804d4a6208a59a131e116be0f9feb0a48a140e52707dc1a10000000000", 0x90}], 0x1, 0x7fffff8, 0x6c) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:06:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8ea6, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:06:36 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:06:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x2010, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:06:36 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9337, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:06:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8ea7, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:06:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xb509, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:06:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendfile(r1, r3, &(0x7f0000000040)=0x2, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100f20019000000", @ANYRES32, @ANYBLOB="00000000000000002e2f66696c653100e31424373da94f64e3bb88f3f380499df348c0440c2b6bd3038d8fdd282e9fe5be3f88ef7a293a5e073f3e7f7debd85d32855cd518917d2741067fffb5f505ed69cbc34740f8afece4513c5301fb675df905a40912ed8b1d26a5e308d5ddf41cdf54ff6f0f515ff61e92c5ed344db339001347ff17e800000000000000"]) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x200840, 0x0) sendfile(r1, r7, 0x0, 0x4) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:06:36 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:06:36 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:06:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x200001) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x20000001}) 02:06:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x5305, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:06:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xbb98, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:06:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9338, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:06:37 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:06:37 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:06:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x100002, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}, {@uname={'uname', 0x3d, 'version=9p2000.u'}}, {@access_any}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@uname={'uname', 0x3d, '-,\\'}}, {@nodevmap}, {@privport}, {@version_u}], [{@measure}, {@subj_role={'subj_role', 0x3d, '#@^\\'}}, {@subj_type={'subj_type', 0x3d, '^{'}}, {@smackfsroot={'smackfsroot', 0x3d, '/:#'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'wfdno'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_user={'subj_user', 0x3d, '9p\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'version=9p2000.u'}}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x33, 0x31, 0x32, 0x32, 0x34, 0x63, 0x36], 0x2d, [0x61, 0x61, 0x62, 0x32], 0x2d, [0x64, 0x31, 0x66, 0x32], 0x2d, [0x32, 0x62, 0x34, 0x32], 0x2d, [0x33, 0x31, 0x33, 0x37, 0x34, 0x37, 0x61, 0x62]}}}]}}) 02:06:53 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8ea8, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:06:53 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:06:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6992, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:06:53 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:06:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000040)={0x1d, 0x7, 0x1, {{0x10, 'version=9p2000.u'}, 0xffff}}, 0x1d) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:06:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0xa9, 0x4, &(0x7f0000000480)=[{&(0x7f0000000240)="9ee9b90c0388beb94598a0ffa2cee90610db0097e0306a9246266e18714da6b9ddada0c839bcc5c453e22835736a990469c3d3ce5dc60583a8049eb60476f3d3f7cc736e966189a2686caefa145ff668a6377e23ce5b3be6f894c7962cbebf05931a783967f4ef4a802e8cda7aacad21cbd86d8b8505da5b0a6333a87d97ef732d7e", 0x82, 0x9}, {&(0x7f0000000300)="bf50cf07fa5512e042151e5da17d65a55e86ce6bc8518a393c13a74ec7da8440d5104126d3b33f1629eb8b996877d594f3a27e9d88a96139a1111a672a9edf07027bf7b32683ea14d09f00b984a9829731c5fc3b21e7596dc665f4ba9c5d46", 0x5f, 0x3}, {&(0x7f0000000380)="368b9f1a9c30ab51122f7ed38f3c6c7e3a1e8b7177fd23e8f6f3996eaed6d85e28b0f2609e9d7d1c41eb23e7eb91ab64a2ee54303117a72d0716025e1a1a1da6c3e6483ce9cc9a49441605cd7f94571ac28e0003304a8181ca900edf3b66f5d98273c2066fea45e14898b283e31b00a221a4b2c136b5fed671e89e333ec66791ca1f8e623000e8da464f43e3ea2adb20ed690a7f930224adc4a2dd8436852426f446", 0xa2, 0x18cc3b9c}, {&(0x7f0000000440)="3cf5a06b583d82f0f394", 0xa, 0x3}], 0xc8, &(0x7f0000000500)={[{@prjquota}, {@block_validity}, {@data_err_abort}], [{@measure}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0xe24}}, './file1\x00'}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/thermal', 0x10e00, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x5, 0x0, 0x40e0, 0x100}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 02:06:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xbc98, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:06:53 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9339, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:06:54 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:07:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) 02:07:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xbd98, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:07:13 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:07:13 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:07:13 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6a92, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:07:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8ea9, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:07:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000001780), 0x8) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='cramfs\x00', 0x2000, 0x0) 02:07:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x933a, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:07:13 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6b92, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:07:13 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:07:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x20000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:07:14 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:07:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xbe98, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:07:14 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x933b, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:07:14 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8eaa, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:07:14 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:07:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x24004, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@fowner_lt={'fowner<', 0xee01}}]}}) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:07:14 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6c92, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:07:14 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:07:14 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000125bd7000fddbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000800000006001600080000000500120000000000060011000300000008000b0006000000"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) pwritev(r1, &(0x7f0000000380), 0x0, 0x4, 0x2) read$rfkill(r1, &(0x7f0000001780), 0x8) syz_io_uring_setup(0x2d60, &(0x7f0000000240)={0x0, 0x4e94, 0x1, 0x1, 0x21c, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x440008c1}, 0x8000) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0x4) 02:07:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xbf98, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:07:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@uname={'uname', 0x3d, 'rfdno'}}, {@posixacl}, {@dfltuid={'dfltuid', 0x3d, r4}}], [{@obj_user={'obj_user', 0x3d, 'trans=fd,'}}, {@smackfshat={'smackfshat', 0x3d, 'trans=fd,'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trans=fd,'}}]}}) 02:07:33 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:07:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r3, r2, 0xee00) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$read(0xb, r4, &(0x7f0000000200)=""/164, 0xa4) keyctl$reject(0x13, r4, 0x4, 0x3, r3) getresgid(&(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000180)) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x6}, [{0x2, 0x5, r2}], {0x4, 0xa}, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1}], {0x10, 0x4}, {0x20, 0x5}}, 0x44, 0x3) 02:07:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xc098, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:07:33 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8eab, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:07:33 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x933c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:07:33 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:07:33 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6d92, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:07:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) openat(r1, &(0x7f00000001c0)='./file1\x00', 0xb0c80, 0x5) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1000, 0x4}}, './file1\x00'}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180)={{}, {r3, r4/1000+60000}}, 0x100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:07:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:07:52 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8eac, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:07:52 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:07:52 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:07:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x933d, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:07:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xc198, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:07:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6e92, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:07:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6f92, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:07:52 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8ead, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:07:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x933e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:07:52 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:07:52 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:07:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x7e01, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:07:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xc298, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:07:52 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) syz_io_uring_setup(0x2829, &(0x7f0000000000)={0x0, 0x4d0, 0x1, 0x2, 0xdf, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:07:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x663c413b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:07:52 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:07:52 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8eae, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:07:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x933f, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:07:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8084, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:07:52 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:07:52 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:07:53 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8eaf, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:07:53 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:07:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x9269, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:07:53 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:08:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xc398, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:08:11 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x926a, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:08:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="00fe89c8ddd74425162b8007d327bb7648d6", 0x12}], 0x3, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000040)) 02:08:11 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:08:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e72f10000007266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) 02:08:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8eb0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:08:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9340, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:08:11 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}]}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:08:11 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}]}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:08:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x3ff, 0x7fffffff}) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) fsync(r0) 02:08:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xc498, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:08:11 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x926b, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:08:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9341, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:08:29 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:08:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xc598, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:08:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x926c, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:08:29 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}]}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:08:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8eb1, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:08:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x4}}, './file1\x00'}) 02:08:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32, @ANYBLOB="040004"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xbff, 0x2d}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x400c400) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:08:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x926d, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:08:29 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:08:30 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9342, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:08:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8100, 0xd4) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:08:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xc698, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:08:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9343, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:08:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8eb2, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:08:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 02:08:46 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:08:46 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:08:46 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x926e, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:08:46 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x926f, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:08:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9344, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:08:46 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:08:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x13) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:08:46 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:08:46 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xedc0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:08:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xc798, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:08:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8f8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:08:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='\x00', 0x400, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='\x00') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) stat(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f00000003c0)) setxattr$security_capability(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000440), &(0x7f0000000480)=@v2={0x2000000, [{0xda2, 0xca}, {0x5a, 0x6}]}, 0x14, 0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x8}}, {@version_u}, {@access_any}]}}) 02:08:46 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:08:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9345, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:08:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000340)="317f93c2ceea700798a7f5de59bece24f1cffebb88cd9ec0aeb03a970a7c0c7ee4cdb290edb3aab8f9caa3f86030af0819d2bfd392f1b0afa669690e0a24ddcc3ec14f13f0cfa258e5e7f930744faf03c7cf7822b06a5fb6319f116265b08d0407fed8c22791efd7ce52ed8552974da6fd1200dfdce524d547f100b712d71a0e50a03f491a805906e419cf92ef1bec5b4a24014ab4379f4a8698890d2f836cdaea94adfda93e093b7e969cba78ad863276e38241", 0xb4}, {&(0x7f0000000400)="24990758b3fc69ce56a2042305d81d632ca285ae3e65c8d789562f49462fc880ca3baa5112219a9c491ab71c72ab76242014a18d1b1672a4d531c3488a11100e9e9cde27987593ca0dd5f3b0f233d5262a3159def40d47f4bf9aeb44566dd26cffbe430e8137e8e5c41bed2ec8061302a9ffc8e33b1f2a306adff1b05b932dfbc0afee8021ffb87ebc1d666dd7aef677431582b8f0aea0c3e3350c7b15040d1bebab091c0253225e1a2568077dd0d71d23441ebb2ef4ccc83718a15e4f282be5f739b3f0", 0xc4}], 0x2, 0x1ff, 0x80000000) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4500, 0x100) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="743d746e733d72646d612c706f72743d3030303030346532322c6d617020f6696d656f75743d3078666666666637665f686173682c0000000000000000000000000000006ea4354582034a002e402f6ed0f3fc0c8e979ed6882631d3a92cfa827cdc283b61e615e358366df6c843a326bb6db48315bc50b82f784789834aafce59efecd46d068c3ec0c92027f7f910bb0000000000ff0000000000000000"]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x7, 0x1, 0x8, 0x203e}) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:08:46 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:08:46 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:09:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xc898, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:09:05 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:09:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x3, 0xfd, 0x2, 0x32, 0x0, 0x3, 0xe4010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x8, 0x8, 0x3, 0x4, 0x20, 0x5, 0x7f, 0x0, 0xdf14, 0x0, 0x3f}, 0xffffffffffffffff, 0x1, r2, 0x9) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:09:05 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x1000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:09:05 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x908e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:09:05 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:09:05 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9346, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:09:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) read(r2, &(0x7f0000000100)=""/88, 0x58) r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x7, 0x5, &(0x7f0000000700)=[{&(0x7f00000002c0)="6c404dae36915cfe9c2ae8ee5a9a116f5f29ceb1720e8db3235e77a15cf1216570248c0a8bf257ca66a7a3a57f765cc59917be9e2d1e8edb708c107f66cb959fd17b8f81042f4d269982e534d6580ad88feb2ac36b7f91d25f052250327a7013215fe6fd71fed234d8ba839ed6ed402b302db42ebb97c5b0641d67931cb2d694490f7b102573447191b628f14625bc1b59f4bd0f98065ad2cd959eca3fa7faf231ca6295f1496c8143fa402e0cf114", 0xaf, 0x6}, {&(0x7f0000000440)="3f60bfb72ebffb444fdb07027fe5927155510c9db1a91deea7362ac29565e99b614ddfaec1d1a194445a38a56a6bbca879c02806ef7df2f465db6985472c6aadf4d5bf9b0fb36d62f5d47f217a1b", 0x4e}, {&(0x7f00000004c0)="d192fa81cfee5d29a6b92dc27fc9bd1be56e9e32ea9e055dd8265d855cc3d876c36980a622d7795395d86c3b0b3706e32dcfcf9da616b93b8bb546bfd45179ba5779010f3e6254b01568c06c1fc796d9fc866dbc2db0b3", 0x57}, {&(0x7f0000000540)="989ab56ffa53b13db6ab49f40ecfaeb976acc1e15af6e00b00021a9813ba89648337bbdbf96b48a585407e143fd406f006177051a1fb183cd64df05c10a9782d87960dbf7d36073c23ebcf82904f8a6d4a048610d0fcfc39c2e919391313060f39e564356df9e5432017636b7c20e6dc6a4aafc46a484b474b7515f8773477f587d136ba80c7caa89bb4e7fb156ed13051badefda37f821f3b7ea1a03b61558b007784b5a7f75f3899e0b375b68e1da0c5731884b816eada97a7012f50cd305b190614625b0bd4eb27", 0xc9, 0x8}, {&(0x7f0000000640)="9f3fc5ee505539b596acc7ee8f0f810af02ae4a040ac2ef1a24a363b0d6cee7327782e3586b17b7faf03e6a6c5be084ab084339697dd1c567e651675864badd4413af7a69060c4d6c9c1363b4cd836555c1b2c383d208ff7c99f303926ee2b1675029d8670983cc3350645ad62666d88d63aedc95c7a8b04669ab970ede2087e50d8c8883091576622215ccd54c52844f0e8da7451fc2c2aedf1", 0x9a, 0x7}], 0x801048, &(0x7f0000000780)={[{@oldalloc}, {@dioread_nolock}, {@user_xattr}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@uid_gt}, {@smackfshat={'smackfshat', 0x3d, '@!.%\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) write$binfmt_script(r3, &(0x7f0000000980)={'#! ', './file0', [], 0xa, "bffdc31774e264ce1d1aa4974695142c506bbe8a057c0be929cbf80b28b655a0d8a956bc14684588c66595f3d1c9827c21b4568b73fae30e864b05a3774db2373d295f99a377580f3d3989ebfbd6e3374832555577f8fb40a4d1cc7c9f95affa91744a6f0619822e0461d2c05b86892b3ea8cc9351fa63aca1190547c2dce1ce0e126c166a9d037f9ef1b2ca356a31072c2d0889b86b8828fa5b32a8fb8254a7c8353d457cabb7deb8b375ae32d199c1798df5b71ec5cb7789a2a2118d15"}, 0xc9) io_cancel(0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x20, r1, &(0x7f0000000880)="a2cc79f74edc9e6da3832ffe592d037eadc510f3f3cd8768cdeaf14d29b2f96200681d292ba804d4d993699062e4e76e681dff020251102eaa945bf135c522ccde8995695738a3e0aaa4bf421a9ca738eddb10acd822a0b897cf48a76343d459dbba1dea0855f928d1cc5e41b0a6969f9dfdf8b91993be18dccf7beaa7e3193fb5f3a13f0aad5c9e28134666a501ce4ac7626a2a411e6d23d03edda707fda737", 0xa0, 0x5}, &(0x7f0000000a80)) dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:09:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9347, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:09:23 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:09:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000bc0)={0x0, ""/256, 0x0}) read$rfkill(r0, &(0x7f0000001780), 0x8) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000180)={0x2, 0x101, @status={[0x3, 0x2, 0x6, 0x6, 0x1, 0x2]}, [0x8, 0x9, 0x80000000, 0x7, 0x8, 0x2, 0x8, 0x7, 0x81, 0x844, 0x5, 0xffffffffffff8000, 0x9, 0x7, 0x1ee, 0x28000000000000, 0x8, 0x2, 0x3, 0x3, 0x7, 0x854f, 0x101, 0x0, 0x6, 0x2, 0xffff, 0x6, 0xfb86, 0x0, 0x211, 0x1, 0x0, 0xddd4, 0x9, 0x9, 0xd59, 0x6, 0x2, 0x2bd, 0x3, 0x100000, 0xdb5f, 0x50, 0xfffffffffffffffd, 0x0, 0x80000001, 0x1, 0x6, 0x7fffffff, 0x2, 0x1, 0xff, 0x6, 0x8000, 0x7, 0x5, 0x3f, 0x2, 0x10001, 0x46573e52, 0xcc, 0xa4, 0x7f94]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000017c0)={0x0, r2, "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", "649951d748b91c03cf4605d11a2a659d7713d0c842b46c3fbc02eb06d89d70aa02783945ec8252a4727b16f2f981abc547e80258fee218518a57c140ead87efe82d155afff4fbb9cae10a025b161bd19f196a168b3d3c6900494f7d6f6d0200ae84dda1008c0dd435cdb9129a14ad0f53fad40c7da234dd93f5bdbebda4763f2e384afdb3cd521ad9db976ffeede508d1d4a2bb2b4c4be6e9abb91f2c6505b2e0a3b1532be3da7be5f96c63817365d6d08fc7763a1e0baf33ca33a90943092cf81db2c4361e07bc68c46b86a02e6830f7334195bbb4e2227c18c9b3cf6485881c7eacd766fc290bb2de34d37b4295a70a189f6ab48530cbbc0ad7c7f530ad86a49d4201f04072559f38773c3b343d71db8e75e36a824c1bc37d099fcc0870ea1822892f545561b12b2aa22a0e8c7057894dc0fa0291c68bd84d42b89cf484ce03b548d23248c8182358014ec35909e393724f3de159b0678db83024b086c9dd97c53084c90bf06da9b634e5929345ec44d8c183e04054df61c36e7e8301a792163e1f14eef504279fbc920eef0da36a17a5085538f6bf975ef8e6cab66b7f750805a3497b92fcd61d2667447834227808c9b076a3e79a99a1d1009504f6aa846556e0c7bcf069a1bed70826699de69f488f9d5abb0c454aa848445123dca39bf883cc0ee334bac4d17a3483af23a2301599c1875ee99df65e72f2dba2c7372e40ead726ae781b77ebd77bb2897ad873d503e3fc08f1ad675593701c7ab4fc17b1735a7bee57d84f8e83dddbaffbf9c8237f0fed939a08768729244bb59cb0863a8a66e7b98eaf55e4f53ce9bdde91ed9bc7ae45be97693bd97e449edb57ac702d388fc3c97329ed5bee0551d766e0915ec4c1c4b00fcffc3dd866a26f79adf603c86d104c157aac0713329e169dce0c109653aef3108a1ccd1bd0a0ac66fd8b973cf0084a34b07a78690b41e0c24d0e9e621c2e76b80bfd1f6ca3c6b17a34d10cd66ab0f2b1bbc0675ae39ab9b1f5fe8f49636e69f1de0d977c85c5daefcd14c7937d51280d272f264fb8434f08e58570ab4ef74b3f1ba4709a8960e8a4e682e3c6eced7b395573ffbad6745f08ae17be18510144ba174f422f8084f592a7d08187c82a1a00ae062bc12a204ae2f5e35b03091620d08a445848479d4035741636d05676d9bca5bb44bc0c9f8e4b43ca9ed9f52b6cfa5a6b50bcbd321a6b55468aedd99e8630ecf87450aa8fc308c9780ea32bea46158eed6a557dd16a485108c3d7f4262a11c0eb16dff2652eefd12743c4b27fb2129142e949dbdf929b5bd1b1697895e7cb28ad74ce5a9409a65a80fde67ae1620a9c3e22b89dcbd8aaafe4d3cef6d52a6725b5a354424669f76689a9de5a5b0157812d93c5d976ac51541c3c9e5e52536e197dba397b64c37e49e4b9dfe8b647d7a486180d0a7ebebe7ded8b13e4ca9a381538dae7df01951b2cef4c944d90c505c30744f05feb6b099d137e9ee01e01ae6bd6264a45fa22ec21e0501ee273366f5b464e70124e0cfe7eee772701fc4aeba55bce9ccbe6b0e27599a00867b55067b2f43e4797bf66c57994a575f0a39378623642dc7f46bcf2df2a4a6ed9d2802398429bf46d2534cf207aeb591f0a422e551d7138312dcd64007487d3c597c0229848144b1bb7f1ef661bb1aaac7c0e61688638162399ae2488f7995faf372d40f7022bb96d25eba62687c97dba44548bf7e82c281a6522b94bfeb99583a6e4ea63638e09f6b1b007fd7a5216fea6607bf38830c653e0047a6d64b2804d4162ed8ae6898aea17dbb0f9e121b9d832eb08422cef235eeb310bcd1c5fa7326b82962524958eae808bd9ec29b5b755304280d63a52389b099d60f82c5cd1fd4a0fdfbc0352ac0020d9fff0f983dd600a805d8e719606c36156e273ef89b61e4d3b668025f657fdb49b976559609cf5d2eeb5eba2bf14bbf6c814ed27ad0677355dbac7a455d36164e954c350b21298f3e33e39c403b614a8082aa28b7df47f4feacc72bd55b8c57153417a4744ee4aaf4465eded0410eaa9f335aa04e5a6d6196658ccc932f5584df5036b13d562fe25681a497b52d649203ea51e252ae567f059e379524daa0974ad83c21fd6adcbadc8a5d57a33806f15a1913f313f0496a0b901cedcd21c95e68b604c1ece2b16251c9b9affb4d42ee3ce2641f7d79c9b3a3d773674d58cef2795e0e090db567c6cd2b85bd888e7c51887e253960810026697d3ae6a003baf476ae17d34caab2450a8295d664cce10d39f23d4bac96c83b7e234e3a68e9075821fd4d00f037e80a885409f6b0dd55992cfb876b1edae3dbad8b1bd20930ef016f055285bc69d2488e3c990edfeabcd84510b35237f9495cf534e74884416042196871929a28ff0ba2b8028314a219f7653c8db2a4fac93ab16f76a2c24abc0417f7cca5f7ad64a7981c89f1f95a23c0540d42da582af457e59005cd56fb00b7dff6f20098e39ffba2ebef0ea8a7ec7c6d8bdf849e3ac459bd060ede9c55f3860f517ace0dbeb8095022187f6f305b6441b1467e57e7d52437613adb6b911fa0a89e4ae0b6581e0ffc6256f52acefe211e0d1df9a366f0d5147361be9e27fa98510755cb5bcf6c672e28b5bef30641bb3b1c8563fb507fc974e231fd6f126e5fc8489150664919f7eb03451d2c9dd8bb68dece12fa645da034eaa7534e9ac55e56cbbe23c7942ee704baeec1f693e089d87f871752dc3d724689fcce399fecc97745204b8f0ef9f162cd1c01a8f07875b041a76a2efb0dd2c10bba61e8947d62b1dc9224bb7357f7250f29a1930d09288665ca47755f21ba824597ce4e30717256a1424dfc81ba338ac82c4509b846803a891eaae0dfd79da86916c56a34ff02b1853054d283e4b89f1ce4de20aa0093ba6af2c8287b1f4e6fddeeacaec4b43ab4776283d486c92ca5dcf8ef08cf24238bfa809d8f0dd823ae34f77acfca6549f95a2e1b647f20cd6072cb04f6a51954b165fa69bca43977f74a1682e0bd65aa723fdd7245adb3d0932d922c4bb200aa422d680eca30fdbdce5f6a9275fb90511976e7dcc7622a2acbb9a82fe1caec4edc7c041ea5c8ba98643ea18ec4b0875637f052d3c2052248f5db60609b1aac25bcb590cce258497714b00784eaaf499972fd4297a116069527cb016a3e3e2da95e3848b1ff9e4f058340e233d1830f782ed8eb87b047a7aff61c5376b90a08b7830af37a4745deaf677210b18769fa60e9ab1cb8d2dfea7a56aaec2b67832c643f3f37d44e9cbd952815bfa728dcaf188b860fea768d22b86bf8cee807d2850947f752baaec9deafbcaaa94feb088603197dfb18802e087a0e9e42a022bc47d3d5d9dfcd5528d8ded36e51675ae92b29a62b33082874ae8a9a10c985b33b21a65bb8bd35591bd1ea31cd08fdbd6a53a9498d0d1f67e840fa1f25549461741dae5f376f8a42b8383f9d2d774656db633e56324760ed112fe8c11afd9494066cc272bd534d2441ce962b26d8d0720a79756e4d05f716fc4f357a5ace3422c36ab17841103dfcffb73a80ce1f5005049c83751c5c0f452e8653c07202d8c6b20ce7f7b6f03d64eebaed39f2ea8d16a5d47ffca35683884037407c8473b8a2ffdfaba291154ab4dfb1ac86100cd5bfe5e6dd41d163f248a693e3a451b752b53204357d55ce85499747a5fe03c71d187845dbaa8a444e3b68fd6978e9f0b3073289c08d3727dbf758ccb0e32563add521bef858052db15139e078fbb84d71125b7de59398f45c8448c31d6788bc784a6776d61ebd3b92bb234876c62abc11cce28edea4c92a9d2c3f0bee2e17a0245fc7bd17088e52d40a638598b169316eec703014a3509c030426892732d79ddd51f9b0de02502f99fbd71261c3bd52238273b4bca2d75ccf2813b91d94e5ec432fb21584285f1dd89f262983f428fd011bf15379ff7a3a01d7ffc6eb926101c7894d0844d74a89b2438636b0c8995286a7c2cb91358d6f38dbd2b84bf184085e68eb9952a9e429b760ba74d878877b4a14ec8f45168982629198ac1724878588d6c4ab330e69dc7fcdf1473ec1517980282130c8e69e058b931a1765db899a781d0292736ba9effabae2d3225bd050cb300286fd3790da7c4d0fce088eba5f764ec173086ca3826aeaa6002f163671c34bd071bdcd7077e95c9ad204217079a81a52e6a75c9fe2abcb35ba1a8c71b7c2e0a69a93f0e75ca7fce342580703d08c581799d640d759c477b3b12337fc5d501873a00b96bf8588b5cdc1442fccba108ed51dfd49b0f6c3b7680dd843e97a4db74d6074bb98ea5f90d865c7b06c6f54dd7e30a9ab47da271207e887058ff595cdf5107b012b98aef4111c61d6a169c59021383ade3a8485342a0833a6bfb82a21d39c1193b92125b617f5f4a797d7804fb17004617399c79017ec6c89265f4b3ae2aca3e9fea6406d88de8030acde8f26fca12c6b3c218eccca5a93e94f423c77fcad340481f3a3d96c8f593267a610b017dfc7ce9a822223e1f2735a450d14a852f7f15d3a28cc02324cfe32dd538a3c90ac1c4811bfb3515a034bee112381daa41374de837ada0497e69e40f01e8de39f9ef3981e99ade1dd5c3d105574e2e7d5fd2d6e3434dd0c3ad119acf475a7b88e49bec9d25241acfd44886eecde87f31cb3c1c7734d2202c3563cf0e30dd915756469030d6cf4c316711730e2db5bc40d92d3fa484adf4e9c2e1b5ea36d478f7ed312cc31c493850673e01f29c5eb3845dddb113b09ac99ee489c199203e8dd3657c471b192c14be09bea1ca498f272a22a707e9b7471c757027ecd8aeee899432684ed73b0eac7a438a71983338652f28ed6b9db75fc6085164c18f2aeaa27114e56192d38545d4d4507e1aeb2bbfc3f5cf65151fd13bacff916fadfcee3d95486055a3abaf6bd4a700d50ab5d7bab6c5892ba4e9d53cd69bfdfd4888a40836c177f1ece7d35bdd7ba416f90bb4f8f699cd583729ae7bdafe5eaf870ccc2a45ade69d0f19f1e840d69e74f1db7c077294c162f41bbafdb7e0265f9e894f8dad9c41061aa1e1958bddee3ada8a5ee80af0955515fb568d8056e791b016e33725de4d3aa540cc192ffbf6618bbf385ba308a6ad252ba7961474aa3adda3a53c15543268b07fec114a6c78b8593e0bb353dab125c5b112299b1a74b568cf87571a24cd6b758c38779b0de080ec320bbdda9be28af8521a5fbe4060f498349c3a88b2c6d103e60aa2768b9bd0bd01cd07dc423e2103a52ee6c5342ec9eb92f026c6d43be69eb188e2ba63b823d5a2b08c585f76f03017b277e9ccaa1ba2f3b83784c99c4cedcdc6a1e28fda82f16c4013d30a11c01127157a24c31eda915a16b676f316b700695bdc8af234030058575159b4b3ca4f9bda250"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0}) r6 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000500)={0x0, r5, "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", "fd50a70ad273da568f2d3156767ad6ea697adc2b28f091bc721198a5082ad92c1ebbcacdd0ac79f97f8a5e2b04dc9068e02ad15cef8a5df25616cdbadeebbb8e3dbe5c25d82d9a8f898e45ba244302200db41fa9a247e36f91d4eb549dbeabf0d10baf8afed73e42d49b9980291c1acf3417cc1d089dd3d9d7e514c9f1ce1b33fd41dcba48a918bd99765a5c8c30a8705c3053e518dd275e6c437ac9a65e09469636160fae9bddafe01fe6599977c4f495710e9a080a08e992ede79e3eb48cec57ef1745eaee0f3babf8ad7a5c631cb0eed5aace15592947c78435882e47daf310b4790eadfd34e623042d9faa4683313a70a3ce2ce8e854f96326fb375a5cc65c068e4bcc3d4ca95786e8babce89feeb2f0ef04848aa49e083cca1b0d82e990e4a170387bcab66b87cb81aff4e4efb369bc94eb30db633775f7332646190c6d9e46afb9d480cf5fcb77725eff3d1c17239744a629c57a2e793fae44f21b027e7baf084ff6e19cd33f6b17dea0af7f103da8ec13791883976340498a2b0286499eb3e2e2d217e0b3687fa12e067e67dcd9831881380972921e9b09e857ac5e67ccd1500f4c332837f1b9a58ef91931cf83f4ac33154afbc498e035400e49f0949e54a7197eed697a5e6a7a4b51f0af93c8994ebf0cda0e50a6e34f0c9988c32f153918e0c5dc0aff9a47c89725b05896a918c36dacd1094310a7ebf18567abac554e256e7e6d2ec1ef33f5be6265c6481279e91044af70dfc82aa655c4fd2682571df84cb0b06fc4c231e215424dc9818a7d4d8ca977c010e9bd2df077755437be63b2c536cf2daebb2f1c397d807570dd5efd1139dd72658f0c2b17d79d331a68caa11719031b095caa9625bec8056bf857da313f879d0fe4d81020087adb9dcb0875bcbff2110322c26c4d66bc6a66737010d16d2f0937ca35398019c10da49a36a8f1afd398fb2163552d2b5acc6b1beb7af3562fa3ba0cdd0e424ca50a02da327eab0a538ccf6032615f5c281825ac6a71afb752c7415f73346b1a6c24acd4a45497692598a7c6003fdb3c41f8205f681f30bded3b774315116ff52ff7eeccbf2871088980e963f70085694a5b401e64e82e788656c0afd6d23372ee521e382abfd4ff54eb1cd875a503b8e0ae145701eb0ea6daf73649f7b9105d1c40da36048bfb8add5ee414165cd836fba68fa76132deae1e232611e12b5394d946d2766caac94f8687c9ec77c6e700778ce50b58cf25a1bda2244627c5a3a7a859ea0d689056fbf6f324da66870505f82e445a60f3a698232a87fb56e8b367722a08ac222ae5523c8fd5ae3d9438bd36d9303bdfdcd1b62901113bcfa848492ed8481a243a71d4f303e22624bbaef1cbb547aac745f8c38eebf010a9bd8c61e372b7d98e4d43c798062fc001a13bea8148fe30ed258ca0dbb7b643cfe997889ba9c5f2b0776b64e6252d31e8a30a8927fe7ae278f23dbc034e19c999380ece59def994c67d671ce100b52a2a22232422811ab786eacbae0da591ff27813e8c7c10c34e6fe2b1eab0d9917e128fdfc0b5b3e9f2f97138cc93216f8c0008e23fe2a8fcddcdcfb04bdcdf125a069f8db95a22594b607def79bf6650f493cd8be526f9e30303a57fd510826555283d08f0712ae3675af43acdbc06dce20856ff7a592feca80c262975c5d1e6b6178f6633dce30867aa3464c3c4a21ee1da546cd6f05142fbdcf6f5d5d2335ebcd1f466104e9ad19ff5567af87102e7ba3645c428cd69814f208405ebd5910eb27cf72349cc49e528e960ba73d1cfd065f982bbfcf725e335d8dfd56038d6d81999fd15f25506c4b06da3ce9b07a1320a3f2aefaf9329d9ac6124fd9148d3ae4c2af89437e77f8b64067535b9e32260285e963c8f49cf56bf0b1d53f146b56b923e03be80849d702c6ea0a09e26281da68f81840fb8a47fa81a6b7ac14d7c84668c85712c9b22c660c5fb4837a29c8fe82c3a127b0b785a830a347c4464db3ec59997866c943b51e5ee114b5acd47cb5d0f389a25314b60e7f3557e172ca11af23ee08dfb21e8d74ddaebd44799ece3c7e16b233f79ae5974127483eb4a8d8f96a8c155e362d65c9bca0297b378f7798682759c0f6939a7392f4b5270ec96dd4e423c4abc5712c3e143c71d28165c8d649b2f5e9673d5f60852cfb2f703a77e0ef9323ff1d62760c211aa96fe614a11a8c1e14643cb9d21e9ebde77c19ee9c756c6ee1cbb65dbd4a1f25ae78b7d39e35709b75a77aa9e5819b14a3dcec012e262c99a80bdd847ff44e598bd2fa8fdf93b7bd68c5929498f20a4d90487c35459054a9a0aab0e3287f89b58277e0f67451d9e9b54cb0b95b78dde2c17293857c7b90b505f35fc252fe16ed6e38ae9f6da6647d823027c588ac1c89ffcfc335ec5ddeceff950d81a3e5a592b2212399b2d1afb20206fa31ec6a41d8b37b127ab47e9676e247d62d3f9baf101ed43519a82236433a77bdd46d960404ad8a836dd4ca1c38a660d394ca0012e69190f76c878e5a442b6a4eb43bbd0076d3de3fafc12a5f301633b7a7c3da03cb792779a228858636609304319233db907806931c006e39c28f195dd9c3d163f65d7e9c386a4fe9c8a17e924e62bf526f745bd1d8beb5f4f2d0027c190c741796cbd0e9e9078dce4859677e3bc7cd823baf8f6058117933991c8e160eefafcc473750b28f55f98303a4a9ed5e8dfe91c98ea7051bdb3701633d33b4a96f9be0213e6fb4c9980265047e0a80453e43bffc2c72a405588196a0658a8a0ec85f861683e23245105545f71feb1f458c358c5d3ed6f8ebd02baa06c4dbb926a7e8ca065c2d94eb79474247ae92ff6bd5704ef6e46521e90601bbaea9f3bb72e2cc8718ca4a6ef013a5cda5daf97599a349457ad8145b091bbb7c5323dd88dc39095bbdcb5d6cfddc3f3101741dde9d4f04f14c0a2dc052ab9311ab8496b079fb4ed4051bbf860ab46885939385bce84d66d6291d5c380a1d4e63ae7466efce8c76ebc43205b19aaf0878faec474fcb7981a102c63c1b51c9f720e24776d9f447f8e82bab85a401729d9757fd4947f82d7e5db3c3414f5ef4c25864cf5af79a989d143042467a93415bd2770ab7edaa2b0ab0840e2a60e2efb4ac0d005b9f00397c9d3bdf16f273a9104f0f66082f22f0d2ad265ef01777d564fee6a1d0ce47c505fb1ed51fcd6d4daa156f43858504af75cb8b78efa3115719fc483afe655269ec5dad2f92f48f9f6a8f4dded1c9441eff4686e89d805b4df274bd4ae87b297f58dbf7abfbae1deabb6d8e5a1e1f65467ad21f28ddd8116c72b623495a4b0e38ee2510203f477874d1d65c13427b2e1fff53719f9f1d6ac4d0912bf4672a86e8604d77ba04c8bf9867929f18c32b1b7b8cfdcfa261a582b4fe389f2e93ef03958d5d1a3a3fee33e7502d81755ba86c28138960323ea1a46fac6026614b130bc99174bb226f89a99ede9b09e361a95a49eafc989c241f3959364ea28976d0ea1e42a18c64e8037860be0cf5748e8756cdcba84cbb3f6f13ecdca95b8d8c070ec2cd29d477117f7d71687893908f2f4c3656df79b5ea3ba8a44f0d42a2f82ef4a08fa709fb2da93b13cc1e6a52bb3393a619e87a1fd3984d11361ae4c868d09193a505ca691ad290a093e984986a2df75f0ba61ade94d78e3984c2325a1344b75e00712e4cbdb94158beba54c648b6107e87d5197542284d8a3080705fdeb55dea97181dcbfe9f311082767c2579f0ddc03deb258c151dd46b04cab66c91af6424d73ab91d0f6f71b1f60fbcad0d312e1886c967380a8289d7090ba22835c593bb0c28a51fb839561cf53ff3ac2e3360729fba92175a6996f8027d1f60c32035c135bf3eae5dbece31d2312af9d9424a7bbf5567b87049cd6f81a0446c5e72df5fb5f743c25f40e1a174249694d574348d2070ed15c660744fc9dd37fe8819c7e95a8721c0308d7cf476c6180a809259ff6103b5245c0098ffcfc92ec5e1bb7d104355b7911247315d503570ecf78bc17430cb64ca8092b805af8a8b5566a1e30d4a1a8b3a9c0225284ee405b7ef17e43d199bfa1defdf105b44f6e5433bab200cdc2504ac79d1b7a8097e6f521912d45d312df0ab4c49ed33854fb16490937026ac2587213a22f89fd88324d47c06e5ef06e66396f520dbe468295906e80b7a1c4da6e9968f73076bad552ee49363e5930e7db8443d230e36be11346ac6a52bd0c0077496d00a020e9a9185d29bee9bb2cef551a043d073bc7a616fced8ecd7d7c8c98fa7a6b4312d9d03259014baaae2e91629827403a08e019a95e1b7e13dc601db935caf700f42dac3b09997d263b2e5f32345df69e6b343294f9edb6ab0aca0ed689d27d46146fcb53dad5d488938b88000e70026341e06bbc30cf4064e9e9e05427649fe04107e431b1a84a2e849ecc3d0656644b6643591870de6d3c863e4238727c72af2dc79bf49a086df4149e55634d844b6e2edc2ee46c822bab679530b871b8ddcea711d09d81b8297f27bdcc6f42bf8b86c7d520aed38293364e6603523215036898aaeccefa1cd0879f1f1571c3bbecd0d37ec2da4fda9e15e8cbb2c49a6d36e3390ad3a36ae6b946559bbe59389b4b47506d9510e2771f00362fd8812610fc59279cc270e6cf007056e9120018a3a208b3a394f2b6b65b875a70b8e35e1bbda10a5cdf546b4252853dd8093e2edc6366801cfea3473c9cda39972149171049d9bb8e47e2328d125d66ff218a5e8e6f543f2f741219c202c984f300c526027e1c7b8329d50987128836f0f8b2b08d6be4dddeda63193244c8c42c10e8400f2e3393d2a4d9c17a040d329679947e328502ab29598853b6c03ef949face7572f8614431333db3e43f42ee734c7c607ae35d299fba86f3ecd75a54c9657f1903e2de0ab6167c2cc500d707e725a4312f06091de8194102b4ced154616f603861d767506b64b7fce107e3e8faaabc785e0b091c8d06e9ed741dbbb118f4306ddbcad445d99fe358a3e57df0a59511f0781ebba0a93152df6686a2343058ac6910d319c388f5823becf4b4b7424c3c26304ca00ceb702601d5940f913d4f52ac2f7c84502a345ccd0526580629ed3b4e551785a161a543d0c05a8fdaf3981b04c9d1822d0f61ce13646db1f8155598ec663d86fd952d88f0879beee854aa2d7ca78d60118919e4fd965980f6245f454637ad9968c5679dc677250ed7406d0367fb799a72767d345d273e54ca824a083e77d63941afed640cf349282bcfc773e1005a24640dd06c2e3e1b5bf820066cd67d4e482163cf865a990286164a209721a4de34d1b8dcb4496fa9e270a9c5bde484d005437f4fd03a278c6f7918b21c74562db31bec2b88a217f344797d8836f0f96192aa66887365ecd933e4f3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000027c0)={r3, r5, "695d9f4e92b5807d7ae49be8a337ec298a031242b5084c99945e99e75e0301d903f8bdc5b903845750118b3738f3c4e0d815868c280649229a9fb4ec2c0d2106bf36b3106e9debbada8986e5276ec3f2167f6d55504028f711627ce93257c7345cc54a50112e653b48f156057a3fc78d0bebbe6adb4433fed83c2beb11cd3486dc8ba40c27e97230ef9840e0c9592f6ab1bd5453e1b03895034ab31a59d76f333d15821cc8a6a28e54f920ed4c81521f03c79a2d34005a1a4a3867a412f00e3bddb5844a722c8f9fd0ed4fe8ad653ba0e196e96baa4bc2e6708b34482ce2d06a5655408c85a800f367e53b76256b7f4ba29f2ee2aefc7ebd400d6a1157920477", "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"}) 02:09:23 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:09:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xc998, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:09:23 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:09:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r0, 0xe, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x81, 0x80, 0x3f, 0x0, 0x0, 0xffffffffffff7fff, 0x63a0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf1b3, 0x4, @perf_config_ext={0xffffffff80000001, 0x8}, 0x4000, 0x7, 0x8, 0x4, 0x100, 0x800, 0x7, 0x0, 0x1}, r0, 0x5, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r0, 0x0, r1, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000600)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB="2c76657273696f6e3d3970323030302e4c2c76657273696f6e3d3970323030302e752c76657273696f6e3d3970323030302e4c2c0076fcbcfb1f514b95404bdade9f535d262139c59eb11badd6e6cea5f9f6ac39a1f2365d7cc70d91cf328df8d1444a86a5804d4f67088f533964a3037deb2fba503effed6fbfaf98a8e354b0543f275c7f057e4cfd87a0070600810b436cd2aed818881c3502e527190a54c211ef0abb302f8b0a1934120055d3242f905838ea7ebe99c8d6b71c5c2959add3c86954599b148b0954bfaf78d5e1591e8b303645ce6ac4788cedee4a9ab262d952e61b31791e75c562f9779bd9a231108de90adfbfed168c"]) 02:09:23 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x918e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:09:23 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:09:23 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x7000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:09:23 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) [ 1802.481157] 9pnet_fd: Insufficient options for proto=fd 02:09:23 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x928e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:09:23 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:09:23 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:09:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xca98, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:09:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:ptchown_exec_t:s0\x00', 0x24, 0x1) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:09:23 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:09:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9348, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) [ 1802.788864] SELinux: Context system_u:object_r:ptchown_exec_t:s0 is not valid (left unmapped). 02:09:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) accept4$unix(r2, &(0x7f0000000100), &(0x7f0000000040)=0x6e, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:09:23 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:09:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x9000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:09:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x400, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000180)) 02:09:24 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:09:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9349, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:09:24 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], 0x0, &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:09:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x20c0, 0x280) read$rfkill(r0, &(0x7f0000001780), 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="ff0a1a5e77f37f0dfce55ab1c5babd4c169190677a12d1a3f7e379947b77dc1abe34ba333538e7e66ccfcf364fca4e9e9ee03c61f099cd3e8983d854d698edbd7de47637f18e967f46964ba7706c060134", 0x51}, {&(0x7f0000000180)="82cc4bacc07201ffa147fb7f94ee13ab1ee3986202ad233940425346974c944d2988cc8ff7ca6380171827a63a01f6b423d1f8597da25862b403d8ff448d00865bf79b84739144d7dcbe53994e831aa13a", 0x51}], 0x2, 0x4, 0x6) 02:09:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xcb98, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:09:40 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], 0x0, &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:09:40 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000001ac0)=0x1) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/187, 0xbb}, {&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/87, 0x57}], 0x4, &(0x7f00000017c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x40000001) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r4, r3, 0xee00) syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x616719a9, 0x4, &(0x7f0000000500)=[{&(0x7f0000000140)="e75c968b74a336f7748971a44fe7e8e585fc0e3081bca9e3b07f6695bb8d5c85e2632f435b22918b2f41b7ac12c7345bbe1fb2731cc5695d6ca32d6b9b15f429bb3b5c4f8c0380d247e545d48989081235c227046d7792460f8f6ac392c571", 0x5f, 0x200}, {&(0x7f0000000200)="88907bfd41d9103f11f1439b43a62932bb9ba7138c7e6926853a153e674127fc85b641429dc57103cff6239ba4045823f1f6ea1915c947a7f641d8e9b592", 0x3e, 0x7}, {&(0x7f00000002c0)="a2c8ce34df6079cf0068356ee0e07beb13522a8d708242a6844dbf55d5e8c9d7eca25bd768dd2c873ad4a7172f28d009a6c71cc1b55a793b2ce4bfdd73ab3e1d70613c367135442cb3ce06aa16d00ea0d8f9e511ba532651b94c5a4a4d125f209258a30ef33f2e57248ff0200d2c65ea4c1a85a8786149ee28a4130f5d48f80e0aa83260623fff89eb2fa4d7b4972ea8cfc254ac0ab5f3", 0x97, 0x7a4d}, {&(0x7f0000000440)="a5456812021d32fc777e8087370be705d009c7915a916548d7909635ea11e22c7abe1d018be69676846e43e0b9fc2f49d0efaa9927f0f4fa6959171aad91d97cf1c68d4015c0728494cf2c8f59cabafa74e9f60f2eef6715472ead2619a51fe27bb9f797ac0ee4220dba14d75ade70929dd3f9748a4ea29a310c26fc3da445c126f2f7c5dbdd1f1057141485609fb846c0e6089e22fbf1ff4d33051e72b724d8403b367bbc73b2c8be610e833827284f212a4dfd", 0xb4, 0x2}], 0x810082, &(0x7f0000001900)={[{'/'}, {'\\-&'}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', r1}}, {@pcr={'pcr', 0x3d, 0x31}}, {@uid_lt={'uid<', r3}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x1ff}}, {@obj_type={'obj_type', 0x3d, '}\xda&'}}, {@pcr={'pcr', 0x3d, 0x2f}}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) openat(r2, &(0x7f0000001a00)='./file0\x00', 0x2080, 0x0) keyctl$setperm(0x5, r4, 0x8000010) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r8, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000001a40)={0x0, 0x80, 0xff, 0x7f, 0xff, 0x9, 0x0, 0x5, 0x12008, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x100000001, 0x6015a51a}, 0x0, 0x1ff, 0x8, 0x8, 0x36, 0xaf, 0xffff, 0x0, 0x80008, 0x0, 0xffffffffffffff81}, r7, 0x3, r8, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:09:40 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="0400050000000000080003", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:09:40 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x938e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:09:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xa000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:09:40 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x934a, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:09:40 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="0400050000000000080003", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:09:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xb000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:09:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xcc98, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:09:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2, 0x90) 02:09:40 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="0400050000000000080003", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:09:40 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], 0x0, &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:09:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x10000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:09:40 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:09:55 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x948e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:09:55 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x934b, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:09:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa0018, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'trans=fd,'}}, {@debug={'debug', 0x3d, 0xffffffffffff8000}}, {@afid={'afid', 0x3d, 0x3}}, {@privport}, {@cache_loose}], [{@subj_user={'subj_user', 0x3d, 'version=9p2000.L'}}, {@obj_type={'obj_type', 0x3d, 'trans=fd,'}}, {@dont_measure}, {@uid_gt={'uid>', r3}}, {@dont_measure}, {@dont_appraise}, {@dont_hash}]}}) 02:09:55 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:09:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) fchmod(r0, 0x3) 02:09:55 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', 0x0, 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:09:55 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x20000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:09:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xcd98, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:10:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000180)) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7f, 0x3e, 0x0, 0x4, 0x0, 0x1, 0x7101, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x100, 0x7b8, 0x80000000, 0x6, 0x2, 0x6, 0x8, 0x0, 0x8cc, 0x0, 0x9}, r3, 0xc, r0, 0x1) 02:10:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x20100000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:10:12 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x934c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:10:12 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:10:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) openat(r1, &(0x7f0000000000)='./file1\x00', 0x105001, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x200, 0x1b) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x8000, 0x100, 0x1b) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:10:12 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', 0x0, 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:10:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xce98, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:10:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x958e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:10:12 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:10:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x53050000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:10:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) fcntl$getown(r1, 0x9) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:10:12 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:10:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000440)=""/238) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x100a010, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@noextend}, {@noextend}]}}) 02:10:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x69920000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:10:12 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', 0x0, 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:10:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x9, 0x6, &(0x7f00000014c0)=[{&(0x7f0000000180)="182af801b0cb786928e93b584a209e5ea84a6897ebbca85cc6cdd4de3191c7149aa76b655372180a703c3b7a262d3d1c4ad4f54f2e42deae128ba46169c2a6611f66855fbe3a02f5150d100dc8f113301369198d3883f3c0f8e2f4081528f6d54c8aae32abd27aed11096853e8a134f536e0f194ed182103accfed46f8b1c2e595b9c0173e4370007042927af0b7832795166adffd169786959f063f2e8968ce826c85857bca12d91bf8e1accc05115b862e0417149c3a00a1274957e9fc9d99656d796077cc052db6fac282a728d62a669d81a261cf844cee7d1357adf10b61f6c0a0950bd519c5024a5fe987129a0f4934cf8ff4e5", 0xf6, 0x4}, {&(0x7f0000000280)="12726fd63fd0dcf9de", 0x9}, {&(0x7f00000002c0)="b9322b00606466f46a286f1acffa416ac06096313764b948c13406c70f785ddb9bf8a0f720b22edc3d38d8aa47b797fab53d81e414995a047a39df3fe6699fbb24d9b773811145ea36e0bc6fe9f0da9953896c6a26299c4b267453aeda43de62b4bc4914ea8168707721efaeb94e26ab49114e733b87b7602524f244c1827f740c8bffedddba63f31b058d52c69762f1e1676a1c2bc6fecd8d48699acd7eab7a469a88a7fc8c5f44ae3fae9c6d45b40d063603ff32878ddd5e6ebb26ddc223fc9a9df186", 0xc4, 0x10000}, {&(0x7f00000003c0)="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", 0x1000, 0x8}, {&(0x7f00000013c0)="de5f15ca39984a483509c75b3c2b21c8166dd763bb614ab5c5342a674bdc00aaf50aced62f93aa76b92dd294fc456a309fa781608fc6961691", 0x39, 0x5}, {&(0x7f0000001400)="1208467d4c211e712b8bc2b1b0667bed974c45b1da8e16e19ca53db58f8d82af020e9f8aec1bf98d272a48a8d51300e0f0eb5a4d147954386f974fd4a511cc9f9296d819e5ace78564b1db4316f3e9fa3bdd7f55e725463eb7a8f26550d71e5c29003eff0b54b24a347dc1d943684fa700f9977030d37655475ba6a3899c7fc248cba3ab967622f04e2e98f833593ae0e132d378babb0c0c258710265976b02f67a571f101e34c7c68b9f4b565a8f024c7483b6bf365cf3101e9811d04d19a", 0xbf, 0x8}], 0x80000, &(0x7f0000001580)={[{@hide}], [{@obj_role={'obj_role', 0x3d, '&'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@permit_directio}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@uid_lt={'uid<', 0xee01}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x100000, 0x4) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:10:12 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:10:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xcf98, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:10:12 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x934d, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:10:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x968e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:10:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x934e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:10:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6a920000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:10:29 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:10:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="694c4ff84c7979fc2d6de760aba6d16da9b77a9b060e70e7254ab0999726ac07363fd5493b7e23c2d06d1ed33a90240d0a2c6bbed3b2fe032a9d988df1bee153e934b8a17dfedd8124716e9a53d958d5d29f27ae46330cfddf74893dbe1ef1419cc0ce257f6bf662c6e688ef7d02198506ca4cd058902a71618f22cb79c49e9e4fd9", 0x82}, {&(0x7f0000000440)="30f181e557e95676bf3f20f9126ae65dcb398acae24a1caafaff4d94d1b9b2dc4dcf14d4f53a8961949707032e89e3ba0a1c65b94fbe15dd1f94df28f9517fdc6a86a6eb17506a505b1ab8cd53800d51373358bf6a0bb99755947dec9b0b74a3370be89be7a3a2283ce05d30848e4e12be47620ab2a023c92051f02828cec138a6497916d2c17f59fcba49e3f1b955959d62dd8f40bf4368556477f1fc69047e39cacf8ca2add00a23866b910ad600ccb51a81444f15c1ff9401e1b25b6f2ddb59616cdacfb909b3537394f6a805e594b986d6af7db9558543a4372c", 0xdc}], 0x2, 0x6, 0xffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:10:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x200042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x1) ftruncate(r0, 0x3) 02:10:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xd098, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:10:29 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:10:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x978e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:10:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6b920000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:10:30 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:10:30 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/pps', 0x101000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) openat$incfs(r4, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) read$rfkill(r4, &(0x7f0000000040), 0x6) 02:10:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6c920000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:10:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) fcntl$getownex(r3, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x6, 0x9, 0x1, 0x0, 0x6, 0x10c01, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0xed64, 0x2, 0x2, 0x1, 0xffffea1f, 0x8, 0x0, 0xed, 0x0, 0x1}, r4, 0x4, r0, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r5 = getpid() perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r5, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r5, 0xe, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x81, 0x80, 0x3f, 0x0, 0x0, 0xffffffffffff7fff, 0x63a0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf1b3, 0x4, @perf_config_ext={0xffffffff80000001, 0x8}, 0x4000, 0x7, 0x8, 0x4, 0x100, 0x800, 0x7, 0x0, 0x1}, r5, 0x5, 0xffffffffffffffff, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r3, &(0x7f0000000340)=0x8a6, 0x6fc) pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x6, 0x0, 0x3, 0x7, 0x0, 0x100000000, 0xaa2c, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0xd}, 0x4947, 0x9, 0x0, 0x4, 0xd9a, 0xdf, 0xfbff, 0x0, 0x4, 0x0, 0x2}, r5, 0x6, r6, 0x8) 02:10:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x988e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:10:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='wfdno') 02:10:49 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6d920000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:10:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xd198, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:10:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x934f, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:10:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000380)={0x0, 0x5, 0x20}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000180)) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x7, 0x3, 0x5, 0x8c, 0x0, 0x0, 0x10001, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040)}, 0x1, 0x200, 0xa678, 0x7, 0xfff, 0x7ff, 0x1, 0x0, 0xffff54ec, 0x0, 0x80000001}, 0xffffffffffffffff, 0x0, r1, 0x8) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:10:49 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:10:49 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:10:49 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:10:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) socketpair(0x2a, 0x80000, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xe0c, 0x1, 0x5, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0x6}, 0x6, 0x1, 0x1, 0x7988, 0x1c, 'syz1\x00', "cdeb796dce24b690bb6d678605ffbffa611b9a9c22c427d9ccbad37605a8cdd5", "c89fcd97da6e8e4005ca5c68978f5c10fb83359e6201678cfc8b406c9b230742", [{0x1ff, 0x6, {0x3, 0x3f}}, {0x0, 0x0, {0x2, 0x46c}}, {0xfff, 0x1ff, {0x2, 0x7fffffff}}, {0x7, 0x7f, {0x0, 0x2}}, {0x4, 0x0, {0x3, 0x3}}, {0x40, 0x2, {0x3, 0x5}}, {0x111, 0x3ff, {0x0, 0x8}}, {0x8, 0x46e, {0x1, 0x4}}, {0x1aea, 0x8cb, {0x0, 0x7e92}}, {0x4, 0x7, {0x0, 0x3f}}, {0x928a, 0x81, {0x2, 0x3}}, {0x0, 0x0, {0x3, 0x2}}, {0x80, 0x1, {0x3, 0x1}}, {0xfffb, 0x20, {0x0, 0x1f}}, {0xffff, 0x1, {0x3, 0x2}}, {0x8, 0x5, {0x2, 0x1000}}, {0x6, 0x39a2, {0x1, 0x101}}, {0xfac, 0x8, {0x0, 0x7f}}, {0x2, 0x630, {0x2, 0x1ff}}, {0x4, 0xa58, {0x2, 0x9}}, {0x6, 0x0, {0x2, 0x80000001}}, {0x2, 0xb624, {0x1, 0x3}}, {0x28, 0x1, {0x3, 0x10001}}, {0x3, 0x5, {0x3, 0xd3ac}}, {0x5, 0xffff, {0x1, 0x1}}, {0x9, 0x9, {0x3, 0x1fa}}, {0x1, 0xe66e, {0x1, 0x4}}, {0xfffc, 0x1, {0x1, 0x8}}, {0x80, 0x6, {0x2, 0x8000000}}, {0x3fc, 0x4, {0x0, 0x3}}, {0x1, 0x738, {0x0, 0x7fff}}, {0x2, 0x8000, {0x3, 0x80}}, {0x0, 0x9, {0x3, 0x80000000}}, {0x1000, 0x5, {0x3}}, {0x1, 0xb76, {0x0, 0x81}}, {0x3ff, 0x1, {0x0, 0x8}}, {0x0, 0x7, {0x2, 0x8c}}, {0xe5, 0x2, {0x1, 0x80000001}}, {0x7f, 0x6, {0x2, 0x6}}, {0x3, 0x5, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x0, 0x1, 0x2, 0x2, 0x16, 'syz1\x00', "9ae6b99d9692cf8b5fbb5b0372e2ba9c64fea8e4076b7bb031ad6a1bbb0ae8dc", "0d2df83ef75e3a639d61e44011199e47db1f61558cbfa67e5414948b69d1df88", [{0x2, 0x401, {0x2}}, {0x8, 0x5, {0x2, 0x2}}, {0x2, 0x1, {0x2, 0x800}}, {0x1, 0x3ff, {0x3, 0x9}}, {0x9, 0x2, {0x2, 0xf534}}, {0x9, 0x5, {0x2, 0x7fff}}, {0x3, 0x4000, {0x3, 0x80000001}}, {0xff, 0x6, {0x1}}, {0x4, 0xd993, {0x0, 0x6}}, {0x4, 0x7, {0x3, 0xfffffffe}}, {0x6, 0x1, {0x3, 0x5}}, {0x200, 0x101, {0x2, 0x3}}, {0x1f, 0x7, {0x1, 0x7}}, {0xfb0, 0x4}, {0x2, 0x200, {0x1, 0x20}}, {0x6, 0x0, {0x1, 0x4}}, {0x5, 0x1ff, {0x0, 0x4}}, {0x3f, 0x5, {0x3, 0x330}}, {0x9, 0xd6, {0x2, 0x80}}, {0x0, 0x8, {0x1, 0x80000001}}, {0x5, 0xfffe, {0x1, 0x7}}, {0x6, 0x8000, {0x0, 0x80000001}}, {0x7, 0x200, {0x2, 0x6}}, {0x9, 0x1000, {0x1, 0x9}}, {0x5fb9, 0x7, {0x0, 0x80000000}}, {0xff, 0x5, {0x0, 0x1}}, {0x52d, 0x1, {0x3, 0x9}}, {0x53b3, 0x0, {0x3, 0x1}}, {0x7, 0x9, {0x3, 0x7ff}}, {0x8, 0x2, {0x2, 0x7}}, {0x6e, 0x7, {0x3, 0x1}}, {0xa24, 0x1ff, {0x0, 0x9}}, {0x8d3e, 0x9, {0xc37b38ab028784e4, 0xffffffff}}, {0x800, 0x0, {0x1, 0x6}}, {0x7fff, 0xee, {0x3, 0x9}}, {0xcf, 0x912, {0x1, 0x3ff}}, {0x5, 0x5, {0x0, 0xffffffff}}, {0x8, 0x40, {0x2, 0x800}}, {0x7, 0x7df8, {0x0, 0x9}}, {0x400}]}}}, {{0x254, 0x1, {{0x2, 0xfff}, 0x7f, 0xde, 0x7ff, 0x2, 0x16, 'syz1\x00', "651761250512ccda0df0026614b364c8e07dcbf58ba394fc741b3b02d8abd2c5", "5cc4c300726ec2889c7373f7134e468c8d251253ad4544f1626c5e2ee047bcc2", [{0x80, 0x20, {0x3}}, {0x8, 0x8000, {0x3, 0x5}}, {0x9, 0x2, {0x2, 0x401}}, {0x1000, 0xb96, {0x2, 0x1}}, {0xd301, 0x5, {0x2, 0x1}}, {0x6, 0x6, {0x1, 0x1}}, {0x8000, 0x3, {0x3, 0x7fff}}, {0x1ff, 0x0, {0x0, 0x80000001}}, {0x9, 0x0, {0x3, 0x6}}, {0x8, 0xfffe, {0x0, 0x1}}, {0x9, 0x6, {0x2, 0xffff}}, {0x6112, 0x4, {0x1, 0x8}}, {0xf3e, 0xc525, {0x1, 0xfff}}, {0x6, 0x5, {0x2, 0x800000}}, {0x0, 0x20, {0x0, 0x1}}, {0x1, 0x5, {0x0, 0x401}}, {0x2, 0x3869, {0x0, 0x1521}}, {0x1f, 0x2, {0x1, 0xbc}}, {0x6, 0xf001, {0x1, 0x1}}, {0x7fff, 0x7}, {0x5, 0x6, {0x2, 0x13}}, {0x4, 0x4, {0x0, 0x4}}, {0xf851, 0x1, {0x3}}, {0x5, 0x40, {0x1, 0x322}}, {0x3, 0x3e16, {0x2, 0x8}}, {0x2, 0x0, {0x1, 0x7fff}}, {0x2, 0x1f, {0x1, 0x56}}, {0x101, 0x6, {0x2, 0x7}}, {0x20, 0x0, {0x2, 0x4}}, {0x8001, 0xffff, {0x2, 0xfffffffb}}, {0x40, 0x7, {0x3, 0x5}}, {0x1, 0x2, {0x1, 0x7}}, {0x4, 0x3, {0x3, 0xff}}, {0x3, 0xfff8, {0x2}}, {0x8, 0x4, {0x3, 0xff}}, {0x3, 0x800, {0x1, 0x9}}, {0x7, 0x80, {0x3, 0x46e}}, {0x6, 0x80, {0x2, 0x3ca}}, {0x3, 0x7, {0x2, 0x1}}, {0x6, 0x800, {0x3, 0x167}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x0, 0x2, 0x2100, 0x7, 0xf, 'syz1\x00', "67a0b693e6dc18a2e7663d7214d9f3e29fbd8e6ac3ccfd4b9fad39a26ad3bbd4", "f9aed8cf5701831bba7e92598aacb22a7b3ef0f976fc728aee2a0d7fc0708c65", [{0x8, 0xff, {0x0, 0x9}}, {0x2e8, 0xa27d, {0x2, 0x1}}, {0x1, 0x96, {0x2, 0x5}}, {0x81, 0xffff, {0x3, 0x78dc}}, {0x170, 0x30, {0x2, 0x4}}, {0x921f, 0xfff, {0x0, 0xd80}}, {0x400, 0x400, {0x3, 0x401}}, {0x6, 0x3, {0x2, 0x6}}, {0x8, 0x0, {0x0, 0x5}}, {0x8, 0x81, {0x1, 0x5}}, {0x7, 0x9, {0x3, 0xfffffffb}}, {0x18e, 0x3f, {0x3, 0x7fff}}, {0x5, 0x1, {0x2, 0x2}}, {0x0, 0x7, {0x3, 0xffffffff}}, {0x7, 0x8, {0x2, 0x6}}, {0x5, 0x400, {0x1, 0x1}}, {0x3, 0x7, {0x1, 0x10001}}, {0x7, 0x101, {0x2, 0x6}}, {0x5, 0x7fff, {0x2, 0x5}}, {0x80, 0x401, {0x0, 0xfffffe00}}, {0x0, 0xda, {0x2, 0x401}}, {0x7f, 0x2, {0x2, 0x10000}}, {0x0, 0xe92, {0x1, 0x4}}, {0x401, 0x0, {0x3, 0x1}}, {0x5, 0x7, {0x0, 0x44}}, {0x3ff, 0x6, {0x1, 0x64}}, {0x401, 0x7f, {0x1, 0x6f}}, {0xc206, 0x6, {0x1, 0x3}}, {0x7, 0x8, {0x2, 0x6}}, {0xff, 0x4, {0x3, 0x8001}}, {0x9, 0x6, {0x2, 0x5}}, {0x0, 0x739, {0x3, 0x1}}, {0x401, 0x8f7, {0x3}}, {0x8, 0x4d83, {0x3, 0x63cc}}, {0x20, 0x6, {0x2, 0x9}}, {0x9, 0x20, {0x3, 0x37}}, {0x5, 0x5, {0x1}}, {0x9, 0xb76, {0x1, 0x7f}}, {0x0, 0x3, {0x1, 0x1}}, {0x800, 0x7ff, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{}, 0x80, 0x86, 0x1, 0x4, 0x2, 'syz1\x00', "1d1b4058474470323f9da55617a47880d905fa8eee1f161e5ae50fe0d56c4d1a", "1ba6737ddaad184a4e121f1a2aa48dda6ab5cd38b4245ea4a7a895d6e446687a", [{0x4, 0xff, {0x3, 0x4}}, {0x400, 0xb780, {0x1, 0x6}}, {0x0, 0x2, {0x3, 0x1}}, {0x100, 0x401, {0x1, 0x2}}, {0x9, 0xfffd, {0x0, 0x81}}, {0x4, 0x276e, {0x3, 0x4}}, {0x1, 0x6, {0x0, 0x7fff}}, {0x81, 0x5, {0x0, 0x7}}, {0x6, 0x0, {0x2, 0x800}}, {0x70, 0xfff7, {0x0, 0x4}}, {0x400, 0xff80, {0x3, 0x80000000}}, {0x2, 0x247, {0x3, 0x80000000}}, {0x2a, 0x2f6, {0x5, 0x89f01b7}}, {0x7, 0x27, {0x1, 0x1000}}, {0x5, 0x0, {0x1, 0x4}}, {0x2, 0x7, {0x2, 0x6}}, {0x6, 0x3dec, {0x0, 0x3}}, {0x5, 0x7, {0x3, 0x1bc00000}}, {0x8, 0x3, {0x2, 0x6}}, {0x2, 0x2, {0x1, 0x10001}}, {0x9, 0x0, {0x0, 0x1000}}, {0xc68, 0xfff}, {0xd88, 0xb4ad, {0x1, 0x1}}, {0x4, 0x6, {0x2, 0x8}}, {0xffff, 0x2d, {0x3, 0x6}}, {0x903, 0x2, {0x3}}, {0x1, 0x7, {0x3, 0x9}}, {0x1f, 0x7fff, {0x0, 0x9}}, {0x401, 0x7}, {0x7ff, 0xebad, {0x2, 0x3}}, {0x400, 0x8, {0x3, 0xc8}}, {0x5, 0x6, {0x3, 0x1000}}, {0x33b, 0x5, {0x0, 0x7f}}, {0x4, 0x9, {0x2}}, {0x1ff, 0x2, {0x0, 0x3}}, {0x8, 0x0, {0x0, 0x10001}}, {0x8000, 0x9, {0x3, 0x5da4}}, {0x88, 0x8, {0x3, 0x5}}, {0x3ff, 0x200, {0x2, 0x7f}}, {0x2, 0x25, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x0, 0x2, 0x7, 0x6, 0x9, 'syz1\x00', "5be7109551e4b5af214ff82d896f80a6a746047b2428528683e531990b184638", "9eb279054d9095e837391e63ce728c03cc285550134ebeadb5b2a008fb9d46c4", [{0x5, 0x8000, {0x3, 0x1}}, {0x6, 0x80, {0x2, 0x6}}, {0x8, 0xb4, {0x3, 0x3a36}}, {0xfff8, 0xd6, {0x3, 0x4}}, {0x9, 0x0, {0x2, 0x34}}, {0x9, 0x4, {0x2, 0x9c1c}}, {0x1, 0x8, {0x2, 0x9}}, {0xfff9, 0xeea5, {0x3, 0x7f}}, {0x800, 0x3, {0x3, 0xd9}}, {0x0, 0xa9, {0x2, 0x4}}, {0xfff8, 0x3, {0x1, 0x1}}, {0x3, 0x7f, {0x2, 0x5}}, {0x100, 0x7f, {0x1, 0xfffff28a}}, {0x9, 0x2, {0x3, 0x5}}, {0x9, 0xab6, {0x0, 0x8}}, {0x9, 0x80, {0x0, 0x8}}, {0x689a, 0x0, {0x2, 0x3}}, {0x1000, 0x8, {0x1, 0x3}}, {0x100, 0x6, {0x0, 0x3}}, {0xfff, 0x6, {0x1, 0x6}}, {0x1, 0xff}, {0x4, 0x1, {0x2, 0x5}}, {0xf8, 0x100, {0x1, 0x9}}, {0x1e, 0xf801, {0x2, 0x4a}}, {0x800, 0x401, {0x1, 0x8001}}, {0x7fff, 0x0, {0x0, 0x400}}, {0xff, 0x3ff, {0x1}}, {0x8, 0xaae, {0x1, 0x7f}}, {0x20, 0x1, {0x1, 0x9}}, {0x3, 0x1, {0x3, 0x12ca}}, {0x6, 0x3, {0x1, 0xffff964b}}, {0x9, 0x101, {0x1, 0x70}}, {0xc0ae, 0xfc7b, {0x2, 0x80000001}}, {0x0, 0x20, {0x2, 0xcfc2}}, {0x404, 0x20}, {0x6, 0x64, {0x3}}, {0x7, 0x9, {0x0, 0x7}}, {0x80, 0x7f, {0x0, 0x6}}, {0x1b, 0x4, {0x1, 0x4}}, {0x0, 0x5, {0x2, 0xfffffffe}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:10:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9350, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:10:49 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6e920000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:10:49 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:11:04 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9351, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:11:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d66646be766646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,version=9p2000.u,version=9p2000.L,\x00']) 02:11:04 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6f920000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:11:04 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:11:04 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x998e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:11:04 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:11:04 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4, 0x9, &(0x7f0000000640)=[{&(0x7f00000000c0)="5cb4d81ee3fd97b15067f96a3006e093e4dfd8d9673aa6bf1866", 0x1a, 0x10000}, {&(0x7f0000000180)="48986610115cdfe09424cdcc65206f691e06d6c0740b0802b5c4e21997f355433cb3ab2f98a3dfa6560c3509d32a6e818e3d14db1162a37c645e0ae1ef1748d6c745a97b494eb252c12b2d065ea204fbdfdbcd8bb4ec4de5d99a71dbf0a85922ca84eea0606ee1f814c58b0394418a280972bbd904cb2a648bc397e0f99b4f628b94cde30d8a5c9c8f6f3242561fd07f5449ba655d20942395c714184aa001a2ec60b8e304de88d021fe4d1670a25e09a591ffefc1c47e5bc7750b95ce40ce6ba9928dff04fd91e9aef3e33c33c3", 0xce, 0x1000}, {&(0x7f0000000280)="5cb2fd4217d21f94ae1f47452746d72dabf1e2b5a1df6c898f5d046467d0673d4135c068767af7b7a41ced380bdc01a93b4b536f53124bd5971769a760080d9aabe00e3ca9a0bab56c07c390783137c926697492b2c0", 0x56, 0x6}, {&(0x7f0000000300)="6c7806cf6b26abc7c90f38086722e2eef3bf2d932ee64638b9af934be192d3cddcb9fea87cf35a1c479ca784fe56e26c899fa1f1acfe244db9a97af073ea1db2912cca82a8065e274d86addadad4ff722ec828e1811e37f7b90240249f728465beb475f0fea901220b399b78fb6716d5470b595171720594158d9e69400f70ef6beb86e5773a45970551c705198378271f1880f8aa91273fb203f291a259ea3dc5c78c1846f7e06e34b048eaad876ba414d81d97aa01ea9befc3bbd27553a7ded493afaf", 0xc4, 0xfffffffffffffff7}, {&(0x7f0000000400)="8581e7d629f40411ec71cbf1c18af054ada662dcf2da73731d4392d8594c7a40e1b2a12953ce91ee4dcade34288ebde6003c0cfa57a715258acc12ad0f751d32ab6a8445", 0x44, 0x100000001}, {&(0x7f0000000480)="a9e7126fa1c9a2075a7bc929652a5497d47ddce447a2e42abc9a92cd49bfbf3cb705c68ad517567891a256b68f17bb410eedb7a41f1ab55570d3208ede0f3152bc083b18eeb011d5d2458c408b00260f01d8086949eecdb37107361c2baf5fc510357b54c9f2cbc294f132ece34df53c6eaf69ee2eb0d15e4de49aab033ed9d89079d177d55c7df34a7d0bbc417120db01667e26703cf7c722631c88783a378e05309d3368edc8c5a8fbb3", 0xab, 0x20}, {&(0x7f0000000540)="2e36acbc5c63d0adb7dfb973dd68a6d68570a99aa74fcc86f7079a3190f699e63ba567da83c322670080c69cbf8cff913dd752", 0x33, 0x1ff}, {&(0x7f0000000580)="bd3cdc2d456453d185530707406ef21a98057a3710d255ac5215a73267e88237634d03ffa8aca6a3b195c61d99b93c9f6d6c95458ba7aaf2c4677aa10af2607af1230d891b4d498d42b80cca4841d80154d75a", 0x53, 0x9}, {&(0x7f0000000600)="3f473aa5d9418ac56f5efbdda3d10265737386c4b9d6a24db99a3d16ca87b11a83297647f7fc6d9433d236367c6b63859e301030069fb75f23530be141fe28cf", 0x40, 0x7}], 0x20, &(0x7f0000000740)={[{@huge_within_size}, {@huge_within_size}, {@size={'size', 0x3d, [0x34, 0x74, 0x35]}}], [{@smackfstransmute={'smackfstransmute', 0x3d, ':['}}, {@obj_user={'obj_user', 0x3d, '(^/-!\\{'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'{$#@]-#\'-'}}, {@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@seclabel}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@audit}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) read$rfkill(r0, &(0x7f0000001780), 0x8) 02:11:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xd298, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:11:04 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x7e010000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:11:04 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9352, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:11:04 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(0x0, &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) [ 1903.803122] 9pnet: Could not find request transport: fdkçfdno=0x0000000000000004 02:11:04 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:11:04 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9a8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:11:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x8, 0x7, 0x20, 0x8, 0x0, 0xc5d, 0x15060, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0xffffffff, 0x1}, 0x10000, 0x80, 0x8, 0x0, 0x80000000, 0x9, 0xfff, 0x0, 0x8000, 0x0, 0xb134571}, 0x0, 0x5, r1, 0x1) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="743b616e735366642c7266646e6fcd", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000.L,version=9ersion=9p2000.L,\x00']) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xa5, 0x8, 0x61, 0x1b, 0x0, 0x1000000000, 0x40000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x42240, 0x0, 0x95, 0x1, 0x0, 0x40, 0xf801, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0xc, r0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) 02:11:05 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) [ 1904.074011] 9pnet: Unknown protocol version 9ersion=9p2000.L 02:11:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xd398, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:11:05 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(0x0, &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:11:05 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9353, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:11:05 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:11:05 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x84800000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:11:05 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9b8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:11:05 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}]}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:11:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x108) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:11:05 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:11:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) 02:11:21 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:11:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9c8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:11:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xd498, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:11:21 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9354, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:11:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8cffffff, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:11:21 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(0x0, &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:11:21 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:11:36 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="020001", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:11:36 executing program 3: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) fadvise64(r0, 0x40, 0xffffffff, 0x5) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000140)={0x123327400, &(0x7f00000000c0), 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = fsopen(&(0x7f0000000100)='hpfs\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000840)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x10000, 0x5, 0xfff, 0x11, 0x4337c236, 0x1}, {0x3f, 0x4, 0x6, 0x8, 0x120b06c4, 0x782e}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="010000726e6f3dc5d8c4fff16bdc018b9a8f3666bcf66e44c23f7cebd2050ca39e555244ff585367456cfc071a05ab2cc497c0bebff211072ae6030935d78c8e1665b0cdcf100a6e337c255f6ebf63efd464ebf06e9c53ceaee4b0379798b82faced2a28a7b7cfb3ddb0b1aa1e4c905af28206f65f65ac1a242fb454e4e1ce5c2cb1058adacd396d4158d4a96949b64f143a854067905c07c4b3b956ce9a16890d4e7d1f5d25cf2a0d53bb888acb4aa900b30ff0fa06942326c986ae8e692644585ca92d0865118c46d7b1671afa0a4d248317dab2b7a9b74630218f2b8eed1931c78b40d0716b", @ANYRESHEX=r5, @ANYBLOB="2c76657273796f6e3d3970323030302e4c2c76657273696f6e3d3970323030302e752c76657273696f6e3d3970457430302e4cf400bad1c67ce5b4a3d202ada53dc0bdbde9408a1698269ef50575d95d2d264dd9acf6582028052044cd01efb9522895b060cccbafc1e2a092225bf1157c30f678c662a15ecdd3ce8acf2847e76c94adc679b0ad2f9b53bc367b6f9e7d1ff2a7e39800"/192]) 02:11:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xd598, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:11:36 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:11:36 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9355, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:11:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9d8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:11:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xc0ed0000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:11:36 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:11:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xd698, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:11:37 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:11:37 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="020001", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:11:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xe4ffffff, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:11:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x810000, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:11:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xd798, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:11:37 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:11:37 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="020001", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:11:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9356, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:11:37 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:11:37 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9e8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:12:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9f8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:12:03 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:12:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xf6ffffff, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:12:03 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:12:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:12:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xd898, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:12:03 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', 0x0, 0x0) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:12:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9357, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:12:03 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', 0x0, 0x0) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:12:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xd998, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:12:03 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:12:03 executing program 3: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x90, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x24}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x8810}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:12:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xffff0000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:12:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98c0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:12:03 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:12:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa08e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:12:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:12:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x4000, 0x0, 0x16}, 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) umount2(&(0x7f0000000040)='./file0\x00', 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:12:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xffffff8c, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:12:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xfeff, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:12:24 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa18e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:12:24 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:12:24 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', 0x0, 0x0) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:12:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98c0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:12:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9358, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:12:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x98c0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:12:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xffffffe4, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:12:24 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:12:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xff03, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:12:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) r2 = getpid() perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r2, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r2, 0xe, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x81, 0x80, 0x3f, 0x0, 0x0, 0xffffffffffff7fff, 0x63a0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf1b3, 0x4, @perf_config_ext={0xffffffff80000001, 0x8}, 0x4000, 0x7, 0x8, 0x4, 0x100, 0x800, 0x7, 0x0, 0x1}, r2, 0x5, 0xffffffffffffffff, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) openat$incfs(r4, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) clone3(&(0x7f0000000440)={0x81000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x2c}, &(0x7f00000002c0)=""/87, 0x57, &(0x7f0000000180)=""/50, &(0x7f0000000200)=[r2], 0x1, {r4}}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:12:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9359, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:12:24 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', 0x0, 0x0) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:12:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa28e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:12:25 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(0xffffffffffffffff, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:12:25 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xfffffff6, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:12:25 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:12:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8084ffffffff, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:12:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xfffe, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:12:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x935a, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:12:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x208}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000440)={0x8, 0xffff, 0x2, 0x4, 0x7, [{0xfffffffffffffff7, 0xd5, 0x7, '\x00', 0x1000}, {0x2, 0xff, 0x8, '\x00', 0x1400}, {0x100000001, 0x3b3d, 0x895}, {0x7e0, 0x80000000, 0x7, '\x00', 0x1108}, {0x40ae, 0x100000000, 0x3a4, '\x00', 0x2000}, {0x7, 0x800, 0x78, '\x00', 0x488}, {0x2, 0x7, 0x9, '\x00', 0x1606}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) 02:12:45 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(0xffffffffffffffff, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:12:45 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:12:45 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:12:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa38e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:12:45 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:12:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xedc000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:12:45 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r2}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(0xffffffffffffffff, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:12:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x935b, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:12:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa48e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:12:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x80000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:13:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x8) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x18000, 0x82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1200002, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dd85213f720ec6533c7f67ff7d0b227cd5cbffbd649faf18ea29018eb4fe07e8c73c64337e80c684774d4ffff02c5", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',smackfsfloor=wfdno,appraise_type=imasig,smackfstransmute=version=9p2000.u,\x00']) 02:13:01 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, 0x0, 0x0, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:13:01 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:13:01 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:13:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x935c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:13:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:13:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x1000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa58e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:13:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x935d, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:13:01 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:13:01 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x2000000, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:13:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:13:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x100000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:01 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, 0x0, 0x0, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:13:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x935e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:13:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xb51200, 0x114) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@cache_none}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x30, 0x34, 0x64, 0x39, 0x34, 0x30, 0x34], 0x2d, [0x34, 0x30, 0x62, 0x34], 0x2d, [0x62, 0x62, 0x63, 0x63], 0x2d, [0x63, 0x62, 0x1, 0x36], 0x2d, [0x32, 0x66, 0x36, 0x62, 0x36, 0x31, 0x38, 0x37]}}}]}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000.L,version=9p2000.u,versioz=9p2000.L,\x00']) 02:13:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x200000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) [ 2020.934915] 9pnet_fd: Insufficient options for proto=fd 02:13:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='jffs2\x00', 0x2, &(0x7f0000000300)='smackfsfloor') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1100002, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@nodevmap}, {@posixacl}, {@cache_loose}, {@posixacl}, {@msize={'msize', 0x3d, 0x7}}, {@access_any}, {@posixacl}], [{@smackfsfloor={'smackfsfloor', 0x3d, '0('}}, {@seclabel}, {@dont_hash}, {@measure}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x22}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '\'/\'/\'[[%+\\^#'}}]}}) 02:13:19 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:13:19 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x935f, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:13:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:13:19 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa68e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:13:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat$incfs(r1, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) renameat2(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x700000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:19 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, 0x0, 0x0, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:13:19 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:13:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x800000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:19 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780), 0x0, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:13:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:13:19 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9360, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:13:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat$incfs(r1, &(0x7f0000000180)='.pending_reads\x00', 0x4000, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) renameat2(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x900000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:35 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:13:35 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780), 0x0, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:13:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9361, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:13:35 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780), 0x0, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:13:35 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa78e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:13:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabde7c5be0be157d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d003eaec91814b31363a16ea3b0945bdfc6c81e23f3a0043f2aeb0dcf2794152781f3c0b9d054d9ba7f1c65cc62", @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302e4c2c76657273696f6e3d39703230303f1f752c76657273696f6e3d3970323030302e4c2c00"]) 02:13:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:13:35 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xa00000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:35 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0xb00000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) [ 2054.463797] 9pnet_fd: Insufficient options for proto=fd 02:13:35 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x1000000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:35 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:13:35 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780), 0x0, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:13:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:53 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa88e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:13:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000040)={0x20000001}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:53 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780), 0x0, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:13:53 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x9362, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:13:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:13:53 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a95", 0x24, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:13:53 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:13:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x2000000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:54 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a95", 0x24, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:13:54 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:13:54 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xa98e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:13:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xb000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:13:54 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x2010000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:13:54 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a95", 0x24, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:13:54 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xaa8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:13:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xdf10, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:14:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x10000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:14:11 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x5305000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:14:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:14:11 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9", 0x36, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:14:11 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:14:11 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780), 0x0, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:14:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xab8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:14:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) finit_module(r0, &(0x7f0000000040)='{&\'\x00', 0x2) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d3970323030302e4c2c76657273696f6e3d3970323030302e752c76657273000001000000000030302e4c2c00"]) 02:14:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6992000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:14:12 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:14:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xac8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:14:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:14:12 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xfeff, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 02:14:12 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a95", 0x24, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:14:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6a92000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:14:12 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c67054dbfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9", 0x36, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) 02:14:12 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:14:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x20100000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_L}]}}) 02:14:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0xad8e, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:14:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x6b92000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_L}]}}) 02:14:12 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xee00) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bab260e82451ce9ba8e20b117e8d0dc80417ce58ad90cbf87b0de74c9658720b5c0a3661d8ae7066c918232ec6411faffd20cc7104fafa7e3fa91707001fbd1c443b1a99f253142cf463c9481092db10398d1a1d7db8bdbbbec33293c41a1f5c56b2588c05c734a77230186f835ffafe650045d3986278216fb1dec7d83b84bff7a14d3320f2eeec632bed2aac9910d04278f99b323bcdda5192768c551987ce6f07fd69f94d7136253c54ed48989ae92ff69cd18723bb90c95a1207344fb214bce06d27f8a26d10b73b69b9d956e301a89d4b4a9c3f27b05f671cf8853dc54bf2590e39e671a8e6c3836d", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x20840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) socket$inet_icmp(0x2, 0x2, 0x1) clone3(0x0, 0x0) 02:14:12 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}], r3}, 0x18, 0x0) mount(&(0x7f0000000640)=ANY=[], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='logfs\x00', 0x0, &(0x7f00000003c0)='/dev/loop') lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)=""/136, 0x88) pwrite64(r1, &(0x7f0000000780), 0x0, 0x8) statfs(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/159) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x4860, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="050fff7f0002aae1cbbd1b041eff000079390715d02d3538b3dbee894e960912db22c6a6b146f903cf4118b18bbc49df13c15e122a90bded87499dc9b914da6d1ad4671a7f678f7429edf62c0b25f9ee6460b7926bdb068a09b9619584277c20acbd8604ec67f6f5846e1ec282ef0a139a519da511bf834d2e00e0ff40f434e78fd12a921a2e8250b8c45be431fecdecf881b1a02daaec5b04bdf13ebf2bf04ce1a9fe9e7aa72f5dbbf4c0da80f0c307ac54fd1e11d5"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000005e40)=0x17, 0x800) VM DIAGNOSIS: 02:19:14 Registers: info registers vcpu 0 RAX=ffffffff8441dde0 RBX=ffffffff854328c0 RCX=ffffffff843fe862 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85407e20 R8 =0000000000000001 R9 =ffff88806ce34f03 R10=ffffed100d9c69e0 R11=0000000000000001 R12=fffffbfff0a86518 R13=ffffffff85d07c90 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8441ddef RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe76778a3000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe76778a1000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffadff0fc8 CR3=000000000d812000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=005902fe016c6c6f502e726567616e61 XMM02=20726f747563657865110a0100010101 XMM03=67206365786508007374726174736572 XMM04=650e007a7a7566206365786509006e65 XMM05=650b006574616469646e616320636578 XMM06=636578650d0065676169727420636578 XMM07=20636578650a00657a696d696e696d20 XMM08=650800737472617473657220726f7475 XMM09=7566206365786509006e656720636578 XMM10=616469646e616320636578650e007a7a XMM11=0065676169727420636578650b006574 XMM12=0a00657a696d696e696d20636578650d XMM13=636578650a006873616d732063657865 XMM14=6e696820636578650a006c61746f7420 XMM15=0000736465657320636578650a007374 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8442021b RDX=fffffbfff0b483b1 RSI=0000000000000004 RDI=ffffffff85a41d80 RBP=ffffffff85a41d80 RSP=ffff88806cf09a28 R8 =0000000000000000 R9 =ffffffff85a41d83 R10=fffffbfff0b483b0 R11=0000000000000001 R12=0000000000000003 R13=fffffbfff0b483b0 R14=0000000000000001 R15=1ffff1100d9e1346 RIP=ffffffff84420298 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe077ce12000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe077ce10000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffadff3ae8 CR3=000000000d812000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=005902fe016c6c6f502e726567616e61 XMM02=20726f747563657865110a0100010101 XMM03=67206365786508007374726174736572 XMM04=650e007a7a7566206365786509006e65 XMM05=650b006574616469646e616320636578 XMM06=636578650d0065676169727420636578 XMM07=20636578650a00657a696d696e696d20 XMM08=650800737472617473657220726f7475 XMM09=7566206365786509006e656720636578 XMM10=616469646e616320636578650e007a7a XMM11=0065676169727420636578650b006574 XMM12=0a00657a696d696e696d20636578650d XMM13=636578650a006873616d732063657865 XMM14=6e696820636578650a006c61746f7420 XMM15=0000736465657320636578650a007374