0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:21:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], 0x0, &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:21:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x28, r1, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x180) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20040080) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x88}}, 0x8041) 15:21:33 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:21:33 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:21:33 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb5890", 0x3}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000140)={[{@fat=@dos1xfloppy}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) 15:21:33 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r4, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r6}}, 0x0) 15:21:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:21:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:21:33 executing program 3: exit(0x6) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) r7 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r5, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="22f14e71a4c5d6faff98e2bd7ba2ad921621144db9f95a6f0149cc071fe45ebc84a8ec814506c41745909bf7f1938d0a2001aee6590e76296a7757b952db5ddf2fe431c55a9707716d29d1130420552d1c6c149303c36b5d8d343c680d8d343d44fe28d71cf4e25e8f8b3f691628d1a394e5b30d562cd890112170cd0cf407ec45fa0c45466bc0c471edc0d597fa20a5e5e4ceebbdf6f016dc04736e541312e288fd2b08b318812df2a7e939f8f32537f8fa"]) 15:21:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:21:33 executing program 5: sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000051}, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0x6) write$bt_hci(r1, &(0x7f0000000140)={0x9, @inquiry={{0x401, 0x5}, {"f4cd1e"}}}, 0x9) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20008081}, 0x4004880) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc9, 0x8000, 0x9}}}, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x95e}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) 15:21:33 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:21:33 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:21:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:21:33 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:21:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) [ 1732.836069] Bluetooth: hci1: command 0x0409 tx timeout [ 1734.884070] Bluetooth: hci1: command 0x041b tx timeout [ 1736.932064] Bluetooth: hci1: command 0x040f tx timeout [ 1738.157492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1738.159642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1738.162801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1738.192068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1738.193867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1738.196714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:21:58 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:21:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1018, &(0x7f0000000200)='^},\x00') 15:21:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x44, 0x0, 0x98, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xe08f}, {0x6}]}, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 15:21:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:21:58 executing program 5: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)={0x0, 0x8}) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r4, 0x0, 0x0, 0x0, 0x20010103, 0x1, {0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x9, 0x1, 0x40, 0x2, 0x0, 0x7, 0x4120, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x323, 0x4, @perf_config_ext={0x6, 0x3}, 0x2020, 0x3, 0x8, 0x5, 0x1ff, 0xfffffffe, 0xfffb, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xf, r0, 0x2) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x1, 0xffffffff80000000, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) 15:21:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:21:58 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:21:58 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r2, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:21:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:21:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:21:58 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x10c2) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=@ctrl_frame=@rts={{}, {0x81}, @device_b}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x40, @loopback, 0x4}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000280)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x20}, @device_b, @device_a, @initial, {0x8}}, @ver_80211n={0x0, 0x7ffd, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x825, 0x6, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x6c, "a6aee4fe04da637db01fd8ab51589f5bc791f95ae00159da0c914842ef93ebc534d3ffc1154a3528649332488388a27344dd778f6fea6366689d80100d5bc2734752293588d6ef914a3919e5c5d6d47c190ee6ffc9dff393cf837a0493ddd0e736f4a8a48e2d3cfdc38f72d0"}, {0xdd, 0xea, "02edd3d2f2824af1567ff19e36f6aca4b516a90b1df6c653ae07a458cfd32986675d2e6ac3736a66f61fbba37297ebf4fb8be6f1d4900475dcac14e33bf1614e6ae3c6fa34964b2d59b0f6bab77c73c90118dc106fbd06736fcc431bcd6ef9133b6d04cc210ae9c923d23bc6cb2d41a71e558a784538585b42934cfd3bad339a4debafec4fb37271bf6b58c4124c02a81e0dca344368ebf16ae40012b72eb404d758034b93fbb4d1f79461a75997d8a40dff6cd8358af412b32e0c8ed6ad2b7a77f6b869d3629834ee9f2c22194aec547a2b82d78fff401ab92430cdf37d9969ead88c174e7b1cc35f26"}]}, 0x182) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) fcntl$dupfd(r1, 0x0, r1) fork() clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="682f6d000802110000000802110000010802110000010408ffffffffffff1349c29e3622b39843cc184bba30d2b9393cc508186dc97a2ad8819c8d8c188a629ebf5c91ec37665900095ca270a172507b74cc81f3b667eb5fdcbbd6afdda573cfc226"], 0x62) 15:21:58 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r2, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) [ 1752.561858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1752.592971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:21:58 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:21:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, 0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:21:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, 0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) [ 1752.643869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:21:58 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:21:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x25, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0x7fffffff}]}) io_setup(0xfe, &(0x7f0000000080)=0x0) io_destroy(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_setup(0x8001, &(0x7f00000190c0)=0x0) io_submit(r3, 0x1, &(0x7f0000019380)=[&(0x7f0000019140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) io_submit(r3, 0x2, &(0x7f0000000240)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f00000000c0)="7358636eeb7c2157477697f2d833ac93352751e920eeb2a57187eb16bda9d647beb57d250447bbe1cce46517d96dc892c3d5d7887c56aafc87496a515231109283f02374c49b7909e01610df65d4fcaf9846cf5913bdfc58d2f353acd30cb0b336adcf1bb38cd8aed2ede48d2ca6b435cfb86f060c4cbfb3db112049de6e4fef73fac7daf13196596ecc205baecc20a321c7", 0x92, 0x9, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x1ff, r1, &(0x7f00000001c0)="e9612ce820e1425b3386985b", 0xc, 0x81, 0x0, 0x2, r1}]) [ 1752.789353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1753.107334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1753.115524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1757.157062] Bluetooth: hci1: command 0x0409 tx timeout [ 1759.204953] Bluetooth: hci1: command 0x041b tx timeout [ 1761.253186] Bluetooth: hci1: command 0x040f tx timeout [ 1762.422032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.424233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.427711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1762.496045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.498111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.501526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:22:23 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1018, &(0x7f0000000200)='^},\x00') 15:22:23 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r2, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:22:23 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x10c2) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=@ctrl_frame=@rts={{}, {0x81}, @device_b}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x40, @loopback, 0x4}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000280)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x20}, @device_b, @device_a, @initial, {0x8}}, @ver_80211n={0x0, 0x7ffd, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x825, 0x6, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x6c, "a6aee4fe04da637db01fd8ab51589f5bc791f95ae00159da0c914842ef93ebc534d3ffc1154a3528649332488388a27344dd778f6fea6366689d80100d5bc2734752293588d6ef914a3919e5c5d6d47c190ee6ffc9dff393cf837a0493ddd0e736f4a8a48e2d3cfdc38f72d0"}, {0xdd, 0xea, "02edd3d2f2824af1567ff19e36f6aca4b516a90b1df6c653ae07a458cfd32986675d2e6ac3736a66f61fbba37297ebf4fb8be6f1d4900475dcac14e33bf1614e6ae3c6fa34964b2d59b0f6bab77c73c90118dc106fbd06736fcc431bcd6ef9133b6d04cc210ae9c923d23bc6cb2d41a71e558a784538585b42934cfd3bad339a4debafec4fb37271bf6b58c4124c02a81e0dca344368ebf16ae40012b72eb404d758034b93fbb4d1f79461a75997d8a40dff6cd8358af412b32e0c8ed6ad2b7a77f6b869d3629834ee9f2c22194aec547a2b82d78fff401ab92430cdf37d9969ead88c174e7b1cc35f26"}]}, 0x182) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) fcntl$dupfd(r1, 0x0, r1) fork() clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="682f6d000802110000000802110000010802110000010408ffffffffffff1349c29e3622b39843cc184bba30d2b9393cc508186dc97a2ad8819c8d8c188a629ebf5c91ec37665900095ca270a172507b74cc81f3b667eb5fdcbbd6afdda573cfc226"], 0x62) 15:22:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, 0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:22:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003900)={0x28, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f0000000a80)=0xe8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003900)={0x28, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@acquire={0x518, 0x17, 0x100, 0x70bd26, 0x25dfdbfd, {{@in6=@empty, 0x4d6, 0x6c}, @in6=@private2, {@in6=@mcast2, @in=@broadcast, 0x4e22, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x80, 0x33, r4, r5}, {{@in=@empty, @in6=@mcast1, 0x4e23, 0x7f, 0x4e23, 0xaad8, 0x2, 0x80, 0x20, 0x6c, 0x0, 0xee01}, {0xa38, 0xffffffffffffffff, 0x7, 0x1, 0x4, 0x6, 0x1, 0x100}, {0x6, 0x100000000, 0x1ee0, 0x80}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x3, 0x1}, 0xfff, 0xe73a, 0x5, 0x70bd29}, [@srcaddr={0x14, 0xd, @in=@remote}, @coaddr={0x14, 0xe, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @algo_auth_trunc={0x104, 0x14, {{'nhpoly1305\x00'}, 0x5c0, 0xc0, "b925e34caba167bae54da8c3488a9cf0daca85747a34df91b566b775b76704bbb13b95a760e0e47a4058632564d7e20bc9d88b158ed8b928065bca7868ffc1c54284a39b0b2f1b598daf83f6b1284f47b89a5e8bc9954a1075f5f463b789fdc3b64bcab4ff9eb9d26af5b8e1d720b8406b9f2bb9d9ac16b8924423d217a83e2c8e85a9039e8df00d3d86bbf2a748b444382b12a40f8fc4b7254dfb6c19d1cf8018ba8de68830ed192fe3e59043a997b796b9d53d9b61ee2a"}}, @offload={0xc, 0x1c, {r9, 0x3}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xff}, @policy={0xac, 0x7, {{@in=@local, @in=@local, 0x4e23, 0x181, 0x4e22, 0x800, 0x2, 0x80, 0x20, 0x1, 0x0, r10}, {0x9, 0x8, 0x4, 0x0, 0x4, 0x0, 0x1, 0x5f9}, {0x7ff, 0x4, 0x1, 0x3}, 0x401, 0x6e6bb0, 0x1, 0x0, 0x3, 0x1}}, @tmpl={0x84, 0x5, [{{@in=@remote, 0x4d2, 0x32}, 0x2, @in=@empty, 0x3505, 0x1, 0x1, 0x5, 0x4, 0x40, 0x5011}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0xff}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x3506, 0x3, 0x0, 0x4, 0xa69, 0x47a, 0x1f}]}, @migrate={0x180, 0x11, [{@in=@remote, @in=@local, @in=@private=0xa010102, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x33, 0x3, 0x0, 0x3507, 0xa, 0xa}, {@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, @in6=@remote, 0x2b, 0x1, 0x0, 0x5, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, @in=@rand_addr=0x64010101, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010100, 0x32, 0x2, 0x0, 0x0, 0xa, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x3d}, @in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@loopback, 0x0, 0x3, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x518}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000084) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000a00)={&(0x7f0000000940), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r11, 0x2, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}}, 0x40800) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1000001d0001a3047ceff2c861bff469cd36b900"/29], 0x10}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 15:22:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, 0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:22:23 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r4, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r6}}, 0x0) 15:22:23 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) [ 1778.288479] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1778.299004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1778.325299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1778.334338] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. 15:22:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, 0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:22:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, 0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:22:24 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r4, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r6}}, 0x0) [ 1778.470418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:22:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, 0xffffffffffffffff) write(r0, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x1, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x3) ftruncate(0xffffffffffffffff, 0x9ba) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x48020200) 15:22:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:22:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:22:24 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:22:24 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) [ 1778.791700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1783.653045] Bluetooth: hci1: command 0x0409 tx timeout [ 1785.700079] Bluetooth: hci1: command 0x041b tx timeout [ 1787.748089] Bluetooth: hci1: command 0x040f tx timeout [ 1789.024220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.026193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.041219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1789.064924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.067249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.070255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:22:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1018, &(0x7f0000000200)='^},\x00') 15:22:51 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r4, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r6}}, 0x0) 15:22:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:22:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x18, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x6}]}, 0x20}}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x270, 0x21, 0x300, 0x70bd2a, 0x25dfdbfc, {0x1b}, [@typed={0x8, 0x73, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0xa, 0x24, 0x0, 0x0, @str='@-/^+\x00'}, @typed={0x7, 0x2f, 0x0, 0x0, @str=')]\x00'}, @generic="75e3fe263f6798edac8ea3d5c9d667bd50cdb390e563854ea6a91ef506449afb90256401df3e3817f161a4e4d756e4479ffdd5bca4be96ae4a2ca70b3eeaea8c148667d41a3fd9ad81cb93af713572ec698a9f0b18c702335760eb5bcd4d733ee1e0ba096f42df016884d172d26cbeb13b3571deedc26f0acee9bbc87ea9603c730622354269d25111ed0b796ad7be55191af63477b09e8f1f3ae83dd8e661f8d5cafc2b24d0f44ba5afe5a97a9e1fba7f2b8cf8eb5c3686801c183933f4f9efbf0fd705ca958de74a3a7871e4c3337a2f8ab70f9b3b6be47c16f5a80c25c2a24a878c311c", @generic="dab744e6732fdf4a4a89586c5c8bb50f6daee87620fa54cbb63a3bf99a384315fc466e249c5208308087322e0de1e7a39ba2cee65fd1fc142d4259796a942895a0ecf5ce33e6f091877245be7d7ddc602feea8b723430fb00dc9aa34300571011dd329dd4bf46d09da2854633fcb6d31054c3e65a292d24846e09de2230f9924e1552970987cc4163b71a66425ed8527e8388196affe22c8b933cea027e09b565f02cf2ece367c8ff05a348e463cae8c4a3d9d9445", @nested={0x4, 0x8a}, @typed={0x55, 0x11, 0x0, 0x0, @binary="baeff3858fe8b572e69faacd94c90cebab3d5fb444f880676c8c3adf96d44f3c78778f141a56b6a51058cc89c382c798fadd32388585cc56556a5c6e75ccf3ad6f4df410bb7d870802cd1c4fbf98130895"}, @typed={0x8, 0x51, 0x0, 0x0, @fd=r2}, @typed={0x3f, 0x89, 0x0, 0x0, @binary="9574a71b473b4e906cb1d8826872c73d88d62eec918a610af78314750fab10037bec5ee685098e04063a29020da4f301f1906be246e5b142e7703a"}]}, 0x270}}, 0x40000) 15:22:51 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:22:51 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:22:51 executing program 3: r0 = fsopen(&(0x7f0000000000)='erofs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) fsmount(r3, 0x1, 0x4) fsmount(r1, 0x0, 0xf0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 15:22:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) [ 1805.583652] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 1805.588098] netlink: 'syz-executor.5': attribute type 6 has an invalid length. 15:22:51 executing program 5: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xa4, 0xa8, @random="ea50a516dd807bdbb742404bd6e087318b83e2e0dd9c944cfb26901330a0abbc02111bd4de52e6d612828537937f3145f451a40c6595a712e700e8d8e9852c5ccf8b9578e7816b33f575152f2837227c38f33937d5edd3ca1231aac38ab896d9f1e7c2906836f783dd6d5fd2f74373d249e7d9394cdcf6e46e6e58a2da75f80f3b38feb41579eadc769c6a7fb69b8929e57edf8b5229cb94eca69885c5db782f"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0xc1) r5 = gettid() perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x40, 0x0, 0x3f, 0x8, 0x0, 0x80, 0x8184b, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x401}, 0x908, 0x1ff, 0xfffffffe, 0x8, 0x1, 0x3, 0xb791, 0x0, 0x5, 0x0, 0x2}, r5, 0x2, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) 15:22:51 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="019900000100000018000000b37b5f1206bdf260cbbb69322784df85630a81", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000008000000002e02fc152f66696c"]) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x6, 0xd2, 0x81, 0xfc, 0x0, 0x8, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x5, @perf_bp={&(0x7f0000000040), 0x2}, 0x40, 0x401, 0x8, 0x2, 0x10000, 0x26a, 0x800, 0x0, 0x8001}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fallocate(0xffffffffffffffff, 0x20, 0x4, 0x5) r3 = getpgid(r2) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x6, 0x3f, 0x40, 0x80, 0x0, 0x8000, 0x2611c, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xe}, 0x2001, 0x61cbf970, 0x7d, 0x3, 0x0, 0x1ff, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, r3, 0x7, r6, 0xa) syz_io_uring_setup(0x46ec, &(0x7f0000000080)={0x0, 0x3dad, 0x8, 0x0, 0x26d, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000340)) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000) connect$packet(0xffffffffffffffff, 0x0, 0x0) getgid() 15:22:51 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r4, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r6}}, 0x0) [ 1805.837409] FAT-fs (loop5): Unrecognized mount option "Ým_Ò÷CsÒIçÙ9LÜöännX¢Úuø;8þ´yêÜvœj¶›‰)å~ß‹R)˔즘…ÅÛx/" or missing value 15:22:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000080)=0x6, 0x4) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x2000, 0xc4}, 0x18) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) close(r5) write$binfmt_elf64(r5, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x2, 0x9, 0x40, 0x6, 0x0, 0xd9af85c6e14b190a, 0x8, 0x119, 0x40, 0x210, 0x8c60, 0x0, 0x38, 0x2, 0x6, 0x6, 0x200}, [{0x7, 0x1c, 0x1, 0x401, 0x7f, 0x3, 0x507, 0x4}, {0x7, 0x7, 0xfffffffffffffe01, 0xfffffffffffff000, 0x2, 0x1, 0x3, 0x7}], "d171b0d2decdb75c6067973cbd87e4d87575ad4de9e56411e9ebf74de258ba391bdb5d28b320725ed9da11e5974a11b37045cb20dc185f8602154ba28de4415386f41b3d41ada7275e45d68bd9cab5ef8f150735b02998f41afa867a5a85678a375a23d07d63cd72dbbbfbe6d149ff56bebdfe314d240f57321689c0e640caf4556ce7bea37cc318649b3f5dc6241b65ccf27f29b703da661a4008d32f8023252c509d8af5e4f1fdeae3244f10cb9ebc9ef4702bfcd6d69fe43e09ef1bf69f989cbc3d10a09c2cad1af52949adbc408afb7dc36e97b8ed56db97132a905009106ea10e54a620b998a8b13d80939a84", ['\x00']}, 0x29f) r6 = dup2(r2, r1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x7}}, './file0\x00'}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r9, {0x7}}, './file0\x00'}) sendfile(r0, r7, 0x0, 0xffff) 15:22:51 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:22:51 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:22:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, &(0x7f00000000c0)='\x10') [ 1806.056072] devpts: called with bogus options [ 1810.725336] Bluetooth: hci1: command 0x0409 tx timeout [ 1812.772121] Bluetooth: hci1: command 0x041b tx timeout [ 1814.820061] Bluetooth: hci1: command 0x040f tx timeout [ 1816.125088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.126893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.136040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1816.150454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.152249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.155079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:23:17 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:23:17 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r4, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r6}}, 0x0) 15:23:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x0, &(0x7f0000000200)='^},\x00') 15:23:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:23:17 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) r4 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="cd615288310595b3d4bc2123b8159fb235337c7a07883fa509fd4221e6c65f454dc21fcdfa5b85a99501775fcb6b2c5575138d797825a159eb641bdb9b99e9ed6f9d5c047e9d79247006779b81bb403bc532235f0f0bf4be05d118d3d8b85d9bda0d9a66650b9c48798827e32d0ad299ecf77805c983fbe1dbf1b2b21f5a8448a0a2c699b86e7ede45", 0x89, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r3, r4, 0x1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@private2, 0x0}, &(0x7f0000000180)=0x14) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000004) syz_emit_ethernet(0x46, &(0x7f0000000000)={@remote, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @redirect={0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1}, @loopback}, "c8ed01b536ca3d00"}}}}}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) close(r9) dup3(r9, 0xffffffffffffffff, 0x80000) 15:23:17 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:23:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:23:17 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x141800, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/234, 0xea}, {&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/203, 0xcb}], 0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x80000001) 15:23:17 executing program 3: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x6, 0xc1, &(0x7f0000000540)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/keys\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x6c2fb2b8) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x9, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002a0000cba73a670001900c78000000000000000004e1ff0009000080000e00009c00000088cebd8c4fe0e4146855443e325f80494fe0129e3a108735b1168913986e329b99074b1d8da0fe9e9764ddeac71e112a6b7d78a164b8a2b11068a1ac7fb41b79e8ac3f12261e84e536c67456069c03074934ebc4034e3bb90771b947c450ae85c0402d"], 0x24}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000001d80), 0x0, 0x8) 15:23:17 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r4, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r6}}, 0x0) 15:23:17 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) r4 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="cd615288310595b3d4bc2123b8159fb235337c7a07883fa509fd4221e6c65f454dc21fcdfa5b85a99501775fcb6b2c5575138d797825a159eb641bdb9b99e9ed6f9d5c047e9d79247006779b81bb403bc532235f0f0bf4be05d118d3d8b85d9bda0d9a66650b9c48798827e32d0ad299ecf77805c983fbe1dbf1b2b21f5a8448a0a2c699b86e7ede45", 0x89, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r3, r4, 0x1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@private2, 0x0}, &(0x7f0000000180)=0x14) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000004) syz_emit_ethernet(0x46, &(0x7f0000000000)={@remote, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @redirect={0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1}, @loopback}, "c8ed01b536ca3d00"}}}}}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) close(r9) dup3(r9, 0xffffffffffffffff, 0x80000) 15:23:17 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:23:17 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:23:17 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:23:17 executing program 5: r0 = geteuid() getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@empty, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, 0x0, r5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x0, r0, 0x0, r0, r5, 0x40, 0x300}, 0x0, 0x0, 0x7f, 0x40000, 0x7, 0x6, 0x7f, 0x1, 0x9, 0x4, r6}) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1cafbbc913acc3ec0a00fac0000000000000000800cc00"], 0x1c}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8914, &(0x7f0000000140)={'lo\x00'}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x6000, 0x20, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'sit0\x00', r1, 0x29, 0x1, 0x7, 0x4919944c, 0x10, @mcast1, @mcast1, 0x700, 0x1, 0x4, 0x40}}) stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@access_any}], [{@uid_eq}, {@obj_user={'obj_user', 0x3d, '@{%]}}6!&'}}]}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)) 15:23:18 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') fallocate(r0, 0x40, 0x8, 0x100000001) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x3) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x2d0d) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) [ 1837.028134] Bluetooth: hci1: command 0x0409 tx timeout [ 1839.076083] Bluetooth: hci1: command 0x041b tx timeout [ 1841.124127] Bluetooth: hci1: command 0x040f tx timeout [ 1842.401617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1842.403213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1842.411761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1842.433629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1842.435087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1842.438190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:23:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x0, &(0x7f0000000200)='^},\x00') 15:23:46 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:23:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfefdf010}, {0x6}]}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@getsa={0x28, 0x12, 0x1, 0x70bd2c, 0x25dfdbfe, {@in6=@mcast1, 0x4d6, 0xa, 0x3c}}, 0x28}}, 0x0) 15:23:46 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x2068, &(0x7f00000000c0)={0x0, 0xf1b5, 0x8, 0x0, 0x25d, 0x0, r0}, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000c79000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x3, &(0x7f00000001c0)={0x0, 0x989680}}, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0xc001, 0x0) 15:23:46 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:23:46 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:23:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:23:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:23:46 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:23:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:23:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:23:46 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) [ 1861.015132] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 15:23:46 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:23:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:23:46 executing program 3: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7ff, 0x4, 0xfd39, 0x4}}) syz_emit_ethernet(0x376, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "0000ee", 0x33c, 0x0, 0x0, @local, @private2, {[@dstopts={0x3c, 0x57, '\x00', [@generic={0x8, 0xb7, "9c4773b44bbf72273983bbf87b8b5681bdea46e9324e3dd1c691fdc23d572d009afa09465bce6879985611c87c932be22bb9bc7261a0efea2a357882a40435cc9b6d85c8b1cfe99eab4fd09f5ee39dc1f16b083b64cd6e476c8283143e8be6125d2a35756e3c792a651b1e727568ff6d25a050800af87e7f824695bd1d7cecb4ac957a6439dcc7d23890c83e00e531aa8e7a9295113174151438cb89e363c9344ccbd3a3ff2271a1b5cfa2c350c22b34cb014fbe86ad1e"}, @generic={0x4d, 0x5c, "5b9551e6c298ce3e0e4886689b798d3c5691300d918ba334a805cf2017cfb2c28f0addaac1537217b0e07c973e5d432a35a9de5935a2285f5a9a2eb3caaca6218b7d88299cc3eebb2595ddf3dc5f618e81699c1900ba96dc7927fa05"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x81, 0x400, [0x6bd, 0x7ff, 0x2]}}, @calipso={0x7, 0x48, {0x2, 0x10, 0xff, 0x80, [0x4, 0x2, 0x16fc, 0x1, 0x7fffffff, 0x1, 0x4, 0x8]}}, @generic={0x5, 0x31, "374667a83f9d6d9caa61b70b05460d44d066c20d396fc1ebcf10fd18f26ff468b4e4872ef09613d20512d5ff919798e88c"}, @enc_lim={0x4, 0x1, 0xab}, @generic={0xf6, 0xf7, "59b28266cd5023ce406c5ca3c1f3d3d066a4d326d1d04357e2900a7bdc4b6ea6d9fa49548bab1663e498a8d2b3911707d5bd713425b5a9048ccee5d8e554169c8c745feac66c9d89b94e0ae3426e7303c15509769db393c6001e96d668cebbd1787c5ca2e47b1e3cf75bcc166da2e7a0cf54f723738429c3cad1a80fd1426e42a3743766a56eb978d7235112568d1ffc977a312fe9f5497accc50ac2605acd6e127d2d491732372cb57d56d0bd62db0831be49151b5fee38b56274727dc64b471036336ef6563f2e8ad89f02136200241aa03d5c86d596308da94a42106bd348d5eb3eab8a7a5fceb750529129a64f8f69556481197294"}, @pad1, @jumbo={0xc2, 0x4, 0x2}]}], "7a0d61a3f45cb2f3492ae061a6b567ceb2dca076047dc1d49dc0ea59cc0e04d79832a659a0d5df97e10e8824443e2f1f209eb8dee8ad09172c5863c3e01f329b792c3f7ba1af5e7675d052ec64380104489a0aa1e063bd314f47c93bc20007e2badfc987bbe3de5577cadfc772d1439254ab514e"}}}}}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r3, r4, 0x0, &(0x7f0000000140)) r5 = signalfd(r2, &(0x7f0000000080)={[0x5]}, 0x8) r6 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000100)=[{{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000580)="d35ff22780d4048150982b6574f447782ee4f39c7af19d126f9c5a122932963ba20a6eed867a36686670840812afa3f734a52bfff011101c074a41a259218739d453988e4c822700632f8e1728435e479c8f0d92b49c5bde70f39eba026fbe41a76ddef5d5153b8cfb9e00a2f79c5824408299dbae2d8b1eb40fc76ba7bc805b7edf173c926dc12b29b5d8346078c883d4d0e676f47b74", 0x97}, {&(0x7f0000000640)="c95448f97644443718baee6c9ea87130a92199d5e1ffa0eaf1dfbecaef90c2ddae51146919db98ab9a8dd0f82f14bb4062200fd551bbd74d4a164a3e4ea8ab8b5f87b3f68b5ea994aa4f24d47ddb92c959cdeffe1960b192c74302a37647270627100e31f6af2fbadb724d74056834ab9da785373c1746e8a6b85723a798cde011502d03c495345fd1f62fea99be5202dad9e625a3718bf62d7fd138960702568f253d7a5f9bc71cd40b94", 0xab}, {&(0x7f0000000700)="7ac93d1832c47e39131e7d8cdfdd919b134e628545026d4bdfa1537ecde8421b82c865122c30bab81f795df7993ab20b24657489f842a66abad809208fd2ba28d21e3b6a5802b864939b1ed9178c453e495600", 0x53}, {&(0x7f0000000780)="52490cd05715090f7d79d9e3f2867b7450de8d0a711f536e443daa623d0b2a437c91308ccf69bc9e36b4e32fb972dab27ffb981c64e1deaaa23ab7591c0b734cc679d0604eacb3e4210ff85b7b3f7545d2d4a81670b1275a49959652592c179be295a1e9d41bb96799824c9caab8f009add12939dfc96730dfb9a91d2cc49ac80e48df18b17594e978e980654c76c0847c675f058aa517a3f620ca9f8d07eb51fa420c52fa28674fa6783e3f08e7495ffaa68ca702a91e732a6dd6c9756f53f05c52990545fe61e45ee2343eb4d77a8c7a9c2fd33dcd6f6afbb1b7ddda8f45c26c5cc38e66e372cfa3197ba96e87389c3ada0fe5d8fa", 0xf6}, {&(0x7f0000000880)="c27314c1958be03b8cb72b296a5c3f8da96dd86d28c9ff3eefd81a630bb165eded6c779ef4f63ab5f74c6cff47348ffa40dcab0535a78367bd13ca687d9748bdebc4aa9b602e5a0dfedab058f74e9fd6cbf08f8d7d833cd09a49b7d74227286d83bac1b0c439ec8a170bc0d15f1ec602bbc63f74f202f89b838093c892e6a9f85c5ffbedbe2109e4467cc4c6afc296449bf90c3e3b99ec84e5962a2efbb3e3922474e0edff6c4be326fb0a55ae7a947f89ea236c7d0504b1abd5d495fdcbdd96cd7e664f1619400f2a61681a4f1e23db5e187471fba69008a23b40be9d22087c2cc3458fe1da3e22affb01c96db8", 0xee}, {&(0x7f0000000980)="b392b7c1b4e833f853f00e371c08d7a56f0acfab01973801f7e4f16c36dcf4688bb02df3590a1a4faa35b70947eddaa0f7cf5db22a364a1e902b9830f4f4806fb6d28aca25b0f3d570aa639881e7", 0x4e}, {&(0x7f0000000a00)="5134fe774dee22961deaf74f517190090015f363e7bea099f88a708394dd1f21f1142e73d685dc6ba0cce051a4a24667ac482b3989ca17217ddf24cd6304ad1e034a9f367e89cc104ffd85311d5edc8b196dc871a1057d62e1a6a45a64d1fbf41617b18860655446e4d6e2dfd4f28a7ff01f62453f208b3d6cbb7d09c32a15dc43508319e89a5395a9ef4e65655fe369291e401fc61139634031817ffedc857c44390bc3b5", 0xa5}, {&(0x7f0000000ac0)="ecb552869bf1fd920fbb4f6557a682b486a7e110af29f3ed4199a212af2b404a4e187587c28115e477f2180bfc3ec4a9fa8d0fdf6049ca32002080e3b55cb355f03418eea6d00edfaba7d73fa5d37af1cdf8079befa5384c9061cf8c910db664d78ed568240015c814d96c9ab128fd076e171d983d13e4a4ca95a1d39f7376ccc363e6af103e4bf88f19dd2db2c55df6ceac7e453f920fbe05a13e66ef80178320c414b3c8a3e1592338f2239e3b9c9678cd94cdee082286267a", 0xba}, {&(0x7f0000000b80)="9fe02dbbd9f4443030c28a82939bee58faaf0b1d27fe0a4c57ad4b2fb5594ecf562c4c0ecbda440c7ff0555136527bb46b1ae65e3cd6f85dc1bfde57e83f4a040d8efd29f0f417c499d691ba80d2f7479b7012e9e7693518bf66dd7f0e279b497ea18c0a3521768f38131759be9ea7c45a0114df4ce4521d90007b348e0b58", 0x7f}, {&(0x7f0000000c00)="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", 0x1000}], 0xa, 0x0, 0x0, 0x8001}}], 0x1, 0x20000840) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r2, &(0x7f00000000c0)={r5, r6, 0x1ff}) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) ioctl$TIOCSBRK(r2, 0x5427) 15:23:46 executing program 1: chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r2, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) [ 1865.700084] Bluetooth: hci1: command 0x0409 tx timeout [ 1867.748052] Bluetooth: hci1: command 0x041b tx timeout [ 1869.796050] Bluetooth: hci1: command 0x040f tx timeout [ 1871.101791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1871.103642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1871.106850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1871.163815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1871.165749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1871.168701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:24:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x0, &(0x7f0000000200)='^},\x00') 15:24:11 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:24:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:24:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:24:11 executing program 3: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7ff, 0x4, 0xfd39, 0x4}}) syz_emit_ethernet(0x376, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "0000ee", 0x33c, 0x0, 0x0, @local, @private2, {[@dstopts={0x3c, 0x57, '\x00', [@generic={0x8, 0xb7, "9c4773b44bbf72273983bbf87b8b5681bdea46e9324e3dd1c691fdc23d572d009afa09465bce6879985611c87c932be22bb9bc7261a0efea2a357882a40435cc9b6d85c8b1cfe99eab4fd09f5ee39dc1f16b083b64cd6e476c8283143e8be6125d2a35756e3c792a651b1e727568ff6d25a050800af87e7f824695bd1d7cecb4ac957a6439dcc7d23890c83e00e531aa8e7a9295113174151438cb89e363c9344ccbd3a3ff2271a1b5cfa2c350c22b34cb014fbe86ad1e"}, @generic={0x4d, 0x5c, "5b9551e6c298ce3e0e4886689b798d3c5691300d918ba334a805cf2017cfb2c28f0addaac1537217b0e07c973e5d432a35a9de5935a2285f5a9a2eb3caaca6218b7d88299cc3eebb2595ddf3dc5f618e81699c1900ba96dc7927fa05"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x81, 0x400, [0x6bd, 0x7ff, 0x2]}}, @calipso={0x7, 0x48, {0x2, 0x10, 0xff, 0x80, [0x4, 0x2, 0x16fc, 0x1, 0x7fffffff, 0x1, 0x4, 0x8]}}, @generic={0x5, 0x31, "374667a83f9d6d9caa61b70b05460d44d066c20d396fc1ebcf10fd18f26ff468b4e4872ef09613d20512d5ff919798e88c"}, @enc_lim={0x4, 0x1, 0xab}, @generic={0xf6, 0xf7, "59b28266cd5023ce406c5ca3c1f3d3d066a4d326d1d04357e2900a7bdc4b6ea6d9fa49548bab1663e498a8d2b3911707d5bd713425b5a9048ccee5d8e554169c8c745feac66c9d89b94e0ae3426e7303c15509769db393c6001e96d668cebbd1787c5ca2e47b1e3cf75bcc166da2e7a0cf54f723738429c3cad1a80fd1426e42a3743766a56eb978d7235112568d1ffc977a312fe9f5497accc50ac2605acd6e127d2d491732372cb57d56d0bd62db0831be49151b5fee38b56274727dc64b471036336ef6563f2e8ad89f02136200241aa03d5c86d596308da94a42106bd348d5eb3eab8a7a5fceb750529129a64f8f69556481197294"}, @pad1, @jumbo={0xc2, 0x4, 0x2}]}], "7a0d61a3f45cb2f3492ae061a6b567ceb2dca076047dc1d49dc0ea59cc0e04d79832a659a0d5df97e10e8824443e2f1f209eb8dee8ad09172c5863c3e01f329b792c3f7ba1af5e7675d052ec64380104489a0aa1e063bd314f47c93bc20007e2badfc987bbe3de5577cadfc772d1439254ab514e"}}}}}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r3, r4, 0x0, &(0x7f0000000140)) r5 = signalfd(r2, &(0x7f0000000080)={[0x5]}, 0x8) r6 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000100)=[{{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000580)="d35ff22780d4048150982b6574f447782ee4f39c7af19d126f9c5a122932963ba20a6eed867a36686670840812afa3f734a52bfff011101c074a41a259218739d453988e4c822700632f8e1728435e479c8f0d92b49c5bde70f39eba026fbe41a76ddef5d5153b8cfb9e00a2f79c5824408299dbae2d8b1eb40fc76ba7bc805b7edf173c926dc12b29b5d8346078c883d4d0e676f47b74", 0x97}, {&(0x7f0000000640)="c95448f97644443718baee6c9ea87130a92199d5e1ffa0eaf1dfbecaef90c2ddae51146919db98ab9a8dd0f82f14bb4062200fd551bbd74d4a164a3e4ea8ab8b5f87b3f68b5ea994aa4f24d47ddb92c959cdeffe1960b192c74302a37647270627100e31f6af2fbadb724d74056834ab9da785373c1746e8a6b85723a798cde011502d03c495345fd1f62fea99be5202dad9e625a3718bf62d7fd138960702568f253d7a5f9bc71cd40b94", 0xab}, {&(0x7f0000000700)="7ac93d1832c47e39131e7d8cdfdd919b134e628545026d4bdfa1537ecde8421b82c865122c30bab81f795df7993ab20b24657489f842a66abad809208fd2ba28d21e3b6a5802b864939b1ed9178c453e495600", 0x53}, {&(0x7f0000000780)="52490cd05715090f7d79d9e3f2867b7450de8d0a711f536e443daa623d0b2a437c91308ccf69bc9e36b4e32fb972dab27ffb981c64e1deaaa23ab7591c0b734cc679d0604eacb3e4210ff85b7b3f7545d2d4a81670b1275a49959652592c179be295a1e9d41bb96799824c9caab8f009add12939dfc96730dfb9a91d2cc49ac80e48df18b17594e978e980654c76c0847c675f058aa517a3f620ca9f8d07eb51fa420c52fa28674fa6783e3f08e7495ffaa68ca702a91e732a6dd6c9756f53f05c52990545fe61e45ee2343eb4d77a8c7a9c2fd33dcd6f6afbb1b7ddda8f45c26c5cc38e66e372cfa3197ba96e87389c3ada0fe5d8fa", 0xf6}, {&(0x7f0000000880)="c27314c1958be03b8cb72b296a5c3f8da96dd86d28c9ff3eefd81a630bb165eded6c779ef4f63ab5f74c6cff47348ffa40dcab0535a78367bd13ca687d9748bdebc4aa9b602e5a0dfedab058f74e9fd6cbf08f8d7d833cd09a49b7d74227286d83bac1b0c439ec8a170bc0d15f1ec602bbc63f74f202f89b838093c892e6a9f85c5ffbedbe2109e4467cc4c6afc296449bf90c3e3b99ec84e5962a2efbb3e3922474e0edff6c4be326fb0a55ae7a947f89ea236c7d0504b1abd5d495fdcbdd96cd7e664f1619400f2a61681a4f1e23db5e187471fba69008a23b40be9d22087c2cc3458fe1da3e22affb01c96db8", 0xee}, {&(0x7f0000000980)="b392b7c1b4e833f853f00e371c08d7a56f0acfab01973801f7e4f16c36dcf4688bb02df3590a1a4faa35b70947eddaa0f7cf5db22a364a1e902b9830f4f4806fb6d28aca25b0f3d570aa639881e7", 0x4e}, {&(0x7f0000000a00)="5134fe774dee22961deaf74f517190090015f363e7bea099f88a708394dd1f21f1142e73d685dc6ba0cce051a4a24667ac482b3989ca17217ddf24cd6304ad1e034a9f367e89cc104ffd85311d5edc8b196dc871a1057d62e1a6a45a64d1fbf41617b18860655446e4d6e2dfd4f28a7ff01f62453f208b3d6cbb7d09c32a15dc43508319e89a5395a9ef4e65655fe369291e401fc61139634031817ffedc857c44390bc3b5", 0xa5}, {&(0x7f0000000ac0)="ecb552869bf1fd920fbb4f6557a682b486a7e110af29f3ed4199a212af2b404a4e187587c28115e477f2180bfc3ec4a9fa8d0fdf6049ca32002080e3b55cb355f03418eea6d00edfaba7d73fa5d37af1cdf8079befa5384c9061cf8c910db664d78ed568240015c814d96c9ab128fd076e171d983d13e4a4ca95a1d39f7376ccc363e6af103e4bf88f19dd2db2c55df6ceac7e453f920fbe05a13e66ef80178320c414b3c8a3e1592338f2239e3b9c9678cd94cdee082286267a", 0xba}, {&(0x7f0000000b80)="9fe02dbbd9f4443030c28a82939bee58faaf0b1d27fe0a4c57ad4b2fb5594ecf562c4c0ecbda440c7ff0555136527bb46b1ae65e3cd6f85dc1bfde57e83f4a040d8efd29f0f417c499d691ba80d2f7479b7012e9e7693518bf66dd7f0e279b497ea18c0a3521768f38131759be9ea7c45a0114df4ce4521d90007b348e0b58", 0x7f}, {&(0x7f0000000c00)="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", 0x1000}], 0xa, 0x0, 0x0, 0x8001}}], 0x1, 0x20000840) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r2, &(0x7f00000000c0)={r5, r6, 0x1ff}) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) ioctl$TIOCSBRK(r2, 0x5427) 15:24:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465762f73673010"], &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0xc020, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7570606174652094696e00b7bd0a8afee467"], 0x1f, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext, 0x1c0a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x1f012, r0, 0x3ead2000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CLOSE, 0x200) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4007, @fd=r0, 0x9, 0x7, 0x3ff, 0x1e, 0x0, {0x3, r1}}, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r4, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0\x00') add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, 0x0, r5, 0x0, 0x1) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6465762f6e62643000ddbaa09f9747c2d877cf29d00e76a96a83a48d9927a2a88de32c6daa42ac6f7355778ae544e8c3a54aa16e0b8d270469f006bb93623f4246c7f0b44254f8d6e583c3beef376c1feb548832c7b49fd04cd93637a6cb67208fad1bb872678ff800e5506bac98cd3658b842e3c3701109658f0d26c20b72ed8bfe9d198430d112fb9e2a0e6ff907a61d021c14fa"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) 15:24:11 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:24:11 executing program 1: chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r2, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:24:11 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc02, 0x0) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x1d, 0x6}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 15:24:11 executing program 5: setitimer(0x1, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1e, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000940)={{}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) clone3(&(0x7f0000000200)={0xc000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x27}, &(0x7f0000000980)=""/4096, 0x1000, &(0x7f0000000140)=""/27, &(0x7f00000001c0)=[r0, 0x0], 0x2}, 0x58) 15:24:11 executing program 1: chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r2, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:24:11 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:24:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:24:12 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) [ 1891.044075] Bluetooth: hci1: command 0x0409 tx timeout [ 1893.092166] Bluetooth: hci1: command 0x041b tx timeout [ 1895.140051] Bluetooth: hci1: command 0x040f tx timeout [ 1896.181940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1896.183807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1896.187124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1896.244361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1896.246104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1896.249199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:24:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:24:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, 0x0) 15:24:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0x40, 0x4, 0x7, 0x0, 0x6, 0x20, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0x8}, 0x80, 0x4, 0x0, 0x3, 0x6, 0x8, 0x1ff, 0x0, 0x4, 0x0, 0x1000}, 0xffffffffffffffff, 0x1, r0, 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000160001009effffff00000000fe800000000000000000000400000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff20000000000a000000000000000000000048000100686d6163287368613235362900"/240], 0x138}}, 0x0) r3 = dup2(r2, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x91, 0x2, 0x5, 0x0, 0xff, 0x204c0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x9}, 0x400, 0x1, 0xfffffffd, 0x9, 0x2, 0x0, 0xba, 0x0, 0x3f9a, 0x0, 0x7fff}, 0x0, 0x6, r3, 0x1) 15:24:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x84) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x20) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r3, 0x0, 0x0, 0x3}, 0x4ad) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000100)={0x100, {0x20, 0x5, 0x7, 0x81, 0x8}}) r7 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r10}, 0x0) close(r10) epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xfbba157874193dde, 0x11, r0, 0x0) 15:24:38 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:24:38 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:24:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:24:38 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) [ 1912.290930] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 15:24:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x0, &(0x7f00000008c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:24:38 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:24:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:24:38 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x2, 0x9f, 0x4, 0x3, 0x0, 0x5, 0x2800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, @perf_config_ext={0x1f, 0x2}, 0x20, 0xfffffffffffffffa, 0xfffffffe, 0x0, 0x8, 0x5, 0x75, 0x0, 0x400, 0x0, 0x4b82a2ee}, 0x0, 0xffffffffffffffff, r0, 0x8) r1 = signalfd4(r0, &(0x7f0000000080)={[0x1ff]}, 0x8, 0xb7721b33cb6b879d) r2 = syz_io_uring_setup(0x5efb, &(0x7f0000000140)={0x0, 0x1acd, 0x2, 0x1, 0x313, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) dup2(0xffffffffffffffff, r2) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000040)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) 15:24:38 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:24:38 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = dup2(r0, r0) write$vga_arbiter(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="646571c41f8739d1c7d9636f646573206d656d00"], 0xc) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f0000000340)="26c6766f93a42c599643dce4dd4b6c3ed328e4e2bca5a1fa207fde438e47662398d1f30ea55ff3cb0f763317db9c6a3d46086d7d293b44250f613bb82fa59b465813d6b91e6f1344690457ec112389a8ec210f4821e0eb8b0b009ba62146248e62bcec814d81545504a0b15bcb62483933174e9ff17fb1495261533ae9dcd907efad11634b17509fd30b5c3d603380713312c4b401a97c210093e9fd999591202ad279b86a4ddd8235db423b01e61243b0f76a8ceafbb17fe8725f9c20d3abd2b52b5752ed15629ae2d5f0f5bebe52a6a875402b1f0b2a45e274ba9c1da30e6daa3a6c516df3aa357385b08fec5416d558df3f0260c66f674f2ee7bb274116b7dd7239042fe34f5aa1499cb0ec1562e390543f193f8e1452ce331b66123c709951325fc2654bcf9f289f7db3513facd4ac702b1c308a3b620750af3874df978a03e929003b91ea52bcb5c80d366d7d544cd9d41ec51213622350ca6b324b610f691e16f815da725db9f4b90361886fdd94a413d391897475962e4c8074093b40b7bccefb547809f55d803efc5061c4759521cd6ac4e9f696d9faef88027b9a83ff4938fd42e2cbad2200e7a74dc705189396d5e2d177b0002319b604c69fddeacd1f717a65ac36dca6efb52759cd4780fd587efd5030b6fb83d94ccfb4ee9da1623c61f41ca421468594d212cfcbde98ce103ed882c96672e81e5b9f71de1fb82f888009dcb7047edb7d303df1f4f3b8d247d1190ec1c8c12e24767fdb12a98662c8e80b2f701578a23f2986b30bbc8935cf7eeb2d768bd422195356d1d9cd0fb64a1ba5cffdcf47de018c1ba2848b112b749d70806252c679c6c5608c1acaa31bc24968c2f16ca9a50034a8b79e8a34374d00d39eb6d592dc9738474ac7ab08ae87b3b832845483ebca46281ddf4782482539f836989d195698396da2eca81c886bdaebdad82d609b31e601ac8c2386a50e915ade2e6dd6adbda709ed725567d57f18236426cdb4a1d47482660ed911021bbf62fa16f5893ef92a9f0332d4372d0ebbca14a0d08906df17ac023460d0b326f0629d99c622d96f916ba760eb086a48c9a825604c9c4e2b5a5c858322d0af9a156a058e37edf13a1950119dc7a8e42a99bf2f705caa971f1a353d2eb852fca3f308175ab5f8ec5ddb472ac17967c3a221ecded8acfe59d2a93fabe7ae25eff54d7c6c3f641e75c5bdb35cb83b68846478cd53d0bcf40f1576b276eefd5af85bdc88f7d7433addc16646e42738db679710661e6d56fd325a4b8987f79b5778daa3e3436ee65cd39b02ba07b46a4a6c7225748921eb59ce1fa56fdb1f40f4f65d899ffeed3a51b0669d194c0d9c8da4bb07a735508b26cb66c008915d4fea0ce852a9acd89b64e2ed55e98ca24e91cdd01713da040c530a7cf67a00c8a86958fa7980b40a37a983f5681a279cb86019ec2433456946e823c116de33ac797f9f402b9b20d56070b5042f20fc636eefef21157a163b6bdddda661721e581dc4016227e9efe66cdf84e3eece24dacf1a8e5e9710ac39a03b8cbe6fab12085a4777017aa3b5454a941db5711a1eca9fdeae70ff2a3470bd409ba603aea750710eb0567e878e1b91eb18859452c420756023e0670cf80d4fe57907471a52a1b06dabe6823edcaa42781785b01c62540652a2948073e112b5c45d5fb6a43f92c696bf09e2a5d7dce7641f947f3289a5c35bb73fc64c916a96e051e50e54b8d642d4daa58fa55d0be368bd03ae0bcf3c65fe71bfa0852d005c872e291672c8d32596b607c84eac771d62eb43e99966a9e430d532e65358e26ad2db6af714a74b225d6eab470361b240f4a5caca045089144efeb7648fc1ee8a01452a87962ed574700aaf830f910cc4a9d7074565a5f28f4bd3bd2d3b8ac07072bf9c8ff00384ab83417fc035aa735c7aaa1e2a170cfe11c59040aa9f0402e199c07711f79e409a4f79c3da05b86b5eae7ab4f6144c6ef955394915aef8eac6280a33bbd2807d72720317e87e66ae053c42554e71dbcb08730fccd2611688a99c4bc0c45b031179f648f011ecb245302b8a1b13135d7bfb4afb38d6357594d0f7799646f6208600bbb693c7bd23d4a573a1b82cf27bf0b2a96bea0bae13b40815c2088c35036b94ded915a3e3f3145c2f2331e41d27321e9108db7c526f97d1ec8191b3c4b9a79dda8e5ed2e54093331a387884432144d8c71976527c54ecd90b5b66d35b61a0732036516110675d526def9a1313397d66424122c35d149d5fce25cd82462d4d5ce8454d3de146c169f46827b6b68dbbe4c56f66b2069ff15b7f3bc1fc5dc4857db006bbdbca756472969def980e5a0c2f8a708e3ef14123483b54dc27146d6933fab86033059564c94b0bf801dfac509701d09b2895b807e992fab200617936137f758a6f87a6611dc651bddbe326a3ef2866471a455d7085cbd18ec9ba63ce8aaba179bf6551077fe97d0ee90b1696e6239b1ea0c0ca73ba1f7be8d27f932c5d5d8fee29e758562c209a7324ef890abd3772598884f5a9d9ba8fd9d623b0edc9dd9bea81532f57fbf18001c33d6a7c03551954aa6350d77385ff47cc3c1a6419b26ca81cb0873855970f0972a398c79ee4e0d7d68e11c4e58196050ddbe65e131d4a0a706fd531004b120f67e9ef127e311b2ca096c3b094455f5f3b5e02b0185370b76a13b8dfe5014a06c54de6d8d37c686a4a9db80066b8c02486c7e4cf7d3a39f49ed0fd06cd1f429a42cc07fdb407b8e59cbec505d789e79ae9046357d3d98091d1d208148194b025c90d608afba4c01f2a748a87fbdd3e63b47923c0f368eb414dd3b0bc1e007fc8a315295c23c3f5b628b850182f891d38e069888809ea3b849c066ed0affc74ca59ae4a9ca06d2a614f3f6f01f277e05fcf28000300062783463bca26d563d6a2ec339fac38c4157220f7e7004e7588c7f7e4c36a38bae9e112ce38f54b143d2c39482ccd0d849d78573064904e179f9c3e750e2ca578fa84bacaa36ef408b37a23340e04f01cf8c65ce006a71e81dcc5d420908dec0d90ed11e12af6cbcdbee3a35da2da7732c9c334bf0092ea40671e6227ed5af909cdc97ab2fa0b6d5652d437bf444a12be5cfc51b26d5dd5f3edc5e16f1a63e5fa54f6c6e27f2ff93fb09e5176bf481c4340329770c36494bd56ad828d92de3b015f9cea9fd8fc1e98cdd6710f86524b64f72a328ef7f9f773dda6dd117f5d57dc2329bcbd1c1a633b811e178db9208ad985631a550d5863a9af752bd3e55e1c15f79ae9f5a18cc74334bb42f5ccf02b674e42c9a4ab50f1a6f29f5d4f022958d93ed5d772fe66eacb8471d20d7baa8ed3d889a1dc41f214c6fd10abcd74892b9d72c65faf8691b0e88ac48bc87fcc6317d28209b0747c2983e1899ed421d7e28b077a198c3802989e83a0033e9d94e206623b5161b89d7ccb148b1fbec2bb8de4dbe674bcf75529fa4adac1fbee8c3fd9e0a4588b76e08d035b60af1e1d57675cc8cd6c27e46ea8e70255aed08199950027f48d89931475599fecfc5426d89b8dfbaa46504fa865dfc41cfb6965655aa36caa39a39f3fb4dfbd539d55df038c855895fa3094c419390e1f73e40f34640fc1c0e781c2f4a34ad66a237be48dfa0a6a563522698fec14ce78828c5de002dc35210e737d9c6a06a6e93565b6bf5817a89b157960ca51716f95b587ac26ec4e90668d278a2ef0070465db5b968495c958759010adf0ef899057bff66a15f755ffc206cfb07809914859ed8ccb80d28b9b18bed4d749e0ff26cebc3d805a9cf7fd2772018d867821667a84c6a9d54ecbe77409895703b2b9f74ed34c8bd0402b5c3216d84c456dc996884fd0279304395d9b6efcfa6ae8407e7f94be230d74602325ad73ce02f084add7763f5e6ea625ee38d5b7805ee1333c434a9e2e9e0a65512f6947e23ae9cdfd2743e9c35e6f286de75d34af0d9507b4f513e2a0f1c1e982aa48688d69b707ffef8f8e48f42fb80588a267b1bc3453e828e1e3c301d13a3d02c7f887fe4c42c25105156a98e262781fc1e6709c3537dd18f8bbb801245041db2a0c72583e2e174ca635e4030210774c24aa41ed6a71261bf2957b205d1b2c72ca9d68119a9effbc2aa454862aefefe8b7a85c78bc3e4d8b4fb97cf7e720cd64bd6924c8efd29e841ebf66d833daccd49971687752fd923988007137a9265589514b7c6bc9afcaa21c48d6b66db3f1bbe19c6afd2ef88e2151cf9d8babd6bc674ce27823eec9ca1d53b69605997bdb3db2e57567a17325b01613d340740860409a8e54fd2af6be5c010c5abc82e54cc5eb619c0b3433a7be223175033850ccc672d3143c10f0686414313a084e8ab6eed12cd63551ba5cadc01027ddf556ad9211367b2615d33fe57c08bb5f8fcce4835216a1ecdd105ebdbb6b7ac43c4f0cb2c26126257cf38b7b6dd8be45877ce63b0bbed18c924c4d8b31b56a4812c3d05fcde69ee43840dc4a97d722752bc8716295342d552569168148888557625f10fe5c3545c67f622783f10579d50e90bce3de1e3475395e68540bcae55326c3415afc249f587f56626d941e840701029be59afe3b6bf559068998865dcd0c6c75f88b9215738f77527bae1d506f1746ef7a3b232c59221597865ad31032fd96a34d3f3f6cee8807edaa77bfe9210c5c7d6acaf19106b6224492a88cdc9be7de18629e38a60ad4cabcf78f49c57a3c96ec3bc26c3efd7d8f70fc22373fae6972af64619f2ec6baff92d2ec1e7ece02e48f824992955d5952168a84aaa6c6c5e0fc4dca34518bb9db37a2a67fcaeaecaa366ae7716ebb2d30e99e5d0ec9802e09262ea498288993913cdc1979aa9900184b73c67fa3d2382168be2d5ad9f4af68ca395b1c327998e7bb1c97b22167badb7fd2e5ccd17afe5c7a203ea9079e254f6be6f0517672a451ab0f8aefcde7639e1065043d120acaa6725402103ee2222e7466830210d609f416312ded0c88bcfc552da1e80ad1b1dd02a1352a143890e5abade45fec1c2cc199b546c1ac440dc96b3dbfa7b7bfeb1b4075aae9f7924861e6ceb5465d5ab681c460da7e43494ed99af9ff0836d50362ec0dc62cd57051f8fd391e3b902dc647acc3b2b93cd82a44b0624ad706d03adfb0a8e6bf5ef3d663242a109e8fbf5318ae1896de6728ac11a5e7af674086be609a5ad31c82023ab970a93dfcae7fac9594fdcf9716180ae5f7f85b7acd7a43f03efced4057a0f0adaa5da942a5b9a67807e4c6e9ba68c194ec1d50fc09108af7a5768711765eb7c78e41340bf14e6e89d8e8f8fdef8e1b0b8b76a5c1dd08bff1dcdcc5f437e0ab34fdde4ca3224a4aa7f0092c25866aab94900a9ab057353f20765eb9b2456fe8cdfab162e6ae8934d960f4a7afff22c84dc88acb18d5257b9415a5802b15d2084e2467615e0036164d88d4942ef0f994e34780cdf1b152b4bd0a5de6384b50b6c4d2268b157cc54c55de9a2a179cecb74172385d4a94b2425ece0797c3ec3a6fcd92efa1b7c58fd727892768cfe06b5053cdef1ba2a446e198aa56a572794e07c4744420557214517b5729a49896be9827f433167cf92b0f1c91b7340e467f8bba4959978a41887ad5c32a1a6c0e5a858030f4f03e9ffe0bbd028b8f6caf7f48bde2b751a187c2ecc2994bf651fc6308ed3176b3a3c61e7e572736f6c27e1d98423a2f0fce4a7199fccef656708d38f8f7a7c35def765a6cb2651e64051a36d275cdec27cd2af01dfa3c0d10db1a004a679fdf7d3461ade6aff99f9daf4d257233", 0x1000}, {&(0x7f0000001340)="428b797626a39f944d12787018b328a57369cadd88a28be5d3111227094aca83ddc8bb47caee384bf3c0084c0bf1730e96e72ea34ff714c53f4f2dd162ee57984966c073dc1414c84407f903da0b51965876b1aa179d34115f6128cd3622833579fc5ac7a6f984d4e8bcc828a2be744c562b75773e891e557909e8b79560126ea6a9c072bbe0447071e670c43b1c94319e5a7b672a7ea9ea795fe5bdaaaa41927ffdf316b9d59869f6955c91eea5911e91284623861c6d677854371c79966f72612372b41354f6ce0cdb8902903a95aadc498e61d8f8bc36ad107e", 0xdb}], 0x2, 0x8, 0x8, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x7, 0x200) syz_io_uring_setup(0x4d50, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) write$vga_arbiter(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='ylock io\x00\x00\x00'], 0xb) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 15:24:38 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:24:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x0, &(0x7f00000008c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:24:38 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) [ 1916.900061] Bluetooth: hci1: command 0x0409 tx timeout [ 1918.948159] Bluetooth: hci1: command 0x041b tx timeout [ 1920.996069] Bluetooth: hci1: command 0x040f tx timeout [ 1922.198183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1922.199967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1922.203282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1922.261446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1922.263224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1922.266510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:25:02 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:25:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, 0x0) 15:25:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@ethernet={0x1, @multicast}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc0a85320, &(0x7f0000000100)={0x80}) dup(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) dup3(r0, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000000c0)) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 15:25:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x0, &(0x7f00000008c0)) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:25:02 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:25:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x0, &(0x7f00000008c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:25:02 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:25:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000040), 0x8, 0x220000) write(r2, &(0x7f0000000080)="89c91c78cb56d9b435f265c02929cdbd5c0358ec1e41c378075dab553e562abe4bf62d31a3f151e678cbe4b0398b99c6e337c6df8bc0107a0be3459d210632c5e791a679c27bb0c006fe", 0x4a) r3 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xff1e4000) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) sendfile(r3, r1, 0x0, 0x4000007ffffffc) 15:25:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:25:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@ethernet={0x1, @multicast}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc0a85320, &(0x7f0000000100)={0x80}) dup(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) dup3(r0, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000000c0)) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 15:25:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x0, &(0x7f00000008c0)) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:25:02 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:25:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:25:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x0, &(0x7f00000008c0)) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:25:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000107}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000300)={0x0, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0xf}, &(0x7f0000000140)=""/133, 0x85, &(0x7f0000000200)=""/146, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) r2 = fsmount(0xffffffffffffffff, 0x0, 0x81) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0xf8, 0x81, 0x6, 0x0, 0x4, 0xc0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xad2, 0x8}, 0x0, 0x2, 0xffffffff, 0x0, 0x2, 0x10000, 0x3, 0x0, 0xfffffff8, 0x0, 0x7}, r0, 0xb, r2, 0x7) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000005c0)={{'\x00', 0x3}, {0x3}, 0x2, 0x0, 0x0, &(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)="cc68c69e391f23f118fb0f58396702448dcaab09dfc2931b551fa302d4495ec3f4f95f7af6ad825cf2e2df922d91aae3836662d099d17c79e97730590b78743cfeab7d84614ec39b4ccf21710fe043be1bcc1aa5707e7e3de2cf9983f806d70e721598c1696a24614e537cdb682ee01818d7957f313bbfdcb8a7e67fbd3dd4610691446f0043abce6674b3dba4267d556978e83f5390b6d31ef46924d28268361433940b2d9347f800dda8eef239d3f6", 0xb0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000a4000000000000000c30000000505551fa5b02b675adfc2e536918d82a5a1044acfb397c0479b10d4268b946a5ce2cb1518f773e9c7afad74b44e21c4967000000d71a72717157f69c483ef4f7bb740a840bd4e5b986c7060000001cd0ff8938e63006299053ec416aa7895d261294ac7741a98fb0c9a3c82d570cf0fe2feca7154cbb3226c6012162b9afe4f29f4e0cd51a4bbb465750dabea42a248d80f1d31d3f7dc5e4238eec6fbddf191f000000e5fdce29d2b58c791d23df3f33c02c2ea312d7cec8f2e1423848b6d8b379e7"], 0xcf}) 15:25:02 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:25:02 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) [ 1937.106904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35144 sclass=netlink_route_socket pid=31387 comm=syz-executor.5 [ 1937.220795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34247 sclass=netlink_route_socket pid=31387 comm=syz-executor.5 [ 1937.229746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53893 sclass=netlink_route_socket pid=31387 comm=syz-executor.5 [ 1937.237836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53481 sclass=netlink_route_socket pid=31387 comm=syz-executor.5 [ 1937.344035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35656 sclass=netlink_route_socket pid=31387 comm=syz-executor.5 [ 1937.354529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31387 comm=syz-executor.5 [ 1937.363840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33608 sclass=netlink_route_socket pid=31387 comm=syz-executor.5 [ 1937.365890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35140 sclass=netlink_route_socket pid=31387 comm=syz-executor.5 [ 1937.378199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=31387 comm=syz-executor.5 [ 1937.379537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=31387 comm=syz-executor.5 [ 1941.477018] Bluetooth: hci1: command 0x0409 tx timeout [ 1943.525034] Bluetooth: hci1: command 0x041b tx timeout [ 1945.573017] Bluetooth: hci1: command 0x040f tx timeout [ 1946.083576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1946.086555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1946.094748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1946.096848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1946.097768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1946.099164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:25:27 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:25:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:25:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:25:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, 0x0) 15:25:27 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0x0, 0x7, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x40, 0x40, 0x0, 0x3f, 0x0, 0x40, 0x800, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffff000, 0x8}, 0x2000, 0x9, 0x2, 0x4, 0x70c, 0x71fd, 0x7fff, 0x0, 0x7, 0x0, 0xc5f}, r1, 0xb, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) connect$802154_dgram(r4, &(0x7f0000000140)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) fallocate(r0, 0x0, 0x0, 0x8800000) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xac, 0x2, 0x1, 0x2f, 0x0, 0x1, 0x10000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x18828, 0x100000000, 0x3f4e, 0x2, 0x10000000000000, 0x0, 0x3f, 0x0, 0x100, 0x0, 0xcf2}, r1, 0xd, 0xffffffffffffffff, 0xa) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x1ba) unlinkat(r5, &(0x7f0000000240)='./file0\x00', 0x0) 15:25:27 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:25:27 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:25:27 executing program 3: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x409becb7bde85c2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000002c0)={0x3, {{0xa, 0x4e21, 0x7dff, @remote}}, {{0xa, 0x4e20, 0x5c1a294b, @private0={0xfc, 0x0, '\x00', 0x1}, 0xea}}}, 0x108) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x7dfd, &(0x7f0000000440)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4000, @fd_index=0x8, 0x20, 0x4, 0x3, 0x0, 0x1}, 0x6) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x142}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r5}}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000003580), 0x8000, 0x0) 15:25:27 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:25:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:25:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:25:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:25:27 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:25:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) [ 1966.180070] Bluetooth: hci1: command 0x0409 tx timeout [ 1968.228055] Bluetooth: hci1: command 0x041b tx timeout [ 1970.277469] Bluetooth: hci1: command 0x040f tx timeout [ 1971.513757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1971.515681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1971.521606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1971.551843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1971.554018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1971.558603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:25:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:25:52 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:25:52 executing program 3: r0 = syz_io_uring_setup(0x1e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) close(r5) getpeername$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) read(r5, &(0x7f0000000180)=""/48, 0x30) readahead(r3, 0x9d, 0xe6) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) 15:25:52 executing program 5: r0 = syz_io_uring_setup(0x3246, &(0x7f0000002240), &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4d4c, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x123981, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) syz_io_uring_setup(0x5c8b, &(0x7f0000000340)={0x0, 0x36eb, 0x10, 0x3, 0x97, 0x0, r0}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4000, @fd_index=0x1, 0x40, &(0x7f0000000500)=[{&(0x7f0000000480)="5221e6493cef159720b7e105cc6283516fce243efc51d6a2c3744e645f681b18c0112763164a46c0aea71721a3a0d9ad92518bb5a8f122babc34271a654eecaf838125ed7538b44c3921fa92240365236a0e6d2a1cb08c2d9751bc39731c04610df2e37bc9b8406ef5b765", 0x6b}], 0x1, 0x16, 0x1}, 0x8a) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1, 0x100, 0x1}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r12, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)="a91ec3c2554bfdd40b1f9abb85c56754ad1ff194a3687d1b53ca70f85e33d31ce876412474f54b9702a9434cf0ccbbf81cf075007490339aa6bc46a00da20a89c1125ee53b037b03cb8e57f0cd3131122a5000459553e41274900c5c5208a85917ec08fd0f823708a3bce308de5b8e3a9c58be94b51857e474b252a2489db2a7635589920fdf80374a2613a56b8e4c9816f2fbf02996830324f26f840c8d6090910f3d8863039e6f02994ffc04f9123b225eadd5acb8a993c5450158ab7403a354bbb2ed1e0829", 0xc7}, {&(0x7f0000000780)="d7955e674ed9935fc341d6fdb5be22f77ebe3433287353fc", 0x18}], 0x2, &(0x7f0000000a40)=[{0x58, 0x102, 0xab34, "264e6e91be943975cfe4593d3c995b30ad667db9b7f66a4dcc34fbb167273b60e03f0f86bbd9fc31d1f237e43614dbeb5c34f315bc572909f9ba6aefa2ee7b4f4d336605"}, {0x18, 0x101, 0x2c, "cee45fa346cefc85"}, {0xb8, 0x116, 0x100, "8f9e06a8473abd603e494ead5be629f29d4395126213f6216c3bb64e0a3678eec41d3f96b9be345489d8cdb889d23b78a2a83fb36a5f044196e57a0228de627002933aa802e00090d5589165c651d789882c8a1ca80a9b506553e8a502a1de25baa6859154cd10d30e4169add172f486066cabf3f4ed91bd84b90f715c23f1fa52acdb5f665e4e8d8b78fcfc18e416b9f6de8b42b27c37f50c1408aa03531d51963f"}], 0x128}, 0x0, 0xc000, 0x0, {0x0, r13}}, 0x9) sendmmsg$inet6(r11, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) 15:25:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:25:52 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:25:52 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:25:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') (fail_nth: 1) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:25:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:25:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:25:52 executing program 3: ftruncate(0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) syz_open_procfs(r0, &(0x7f00000002c0)='fdinfo/4\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="14180000001f210c000000000000000700000000a4b0e63a1ae622bbb3d4cd471472b0b5c012fb7162a0160d6274408ede5297f3dc511d659f51616dcc16ccb69a882999ede0a2fb96dfecc62a3ae0e6fc468e4b"], 0x14}}, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r5 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000140)=r5, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000006c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x0, @fd, 0x6, &(0x7f0000000380)=""/237, 0xed, 0x18}, 0x819a) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, @out_args}, './file1\x00'}) fcntl$setstatus(r1, 0x4, 0x6400) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x5, 0x200, 0x100000001, 0x4, 0x8}, {0xfffffffe, 0xe3, 0x3f, 0x4, 0x3, 0x3ff}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000100)={0x1, 0x0, 0x3}) write(r1, &(0x7f0000001200), 0xffffff45) 15:25:52 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:25:52 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@size={'size', 0x3d, [0x74, 0x25, 0xcef0d799486186a5]}}], [{@fowner_gt={'fowner>', 0xee01}}, {@dont_measure}, {@fsname={'fsname', 0x3d, '\xffYr\xf2b\x0f\xfcB\x91$\x82\xcc\r+\x99h\xf5\xde^DqC3\xa4%\x14\xf9`\x14\xfe\xf9\xff\xff\xff\xff\xff\xff\xff=\xaf`\xd7\xc7t\x00'/54}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, '$).-&'}}, {@obj_role={'obj_role', 0x3d, 'tmpfs\x00'}}, {@obj_user={'obj_user', 0x3d, 'fsname'}}]}) 15:25:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:25:52 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:25:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) [ 1986.948322] tmpfs: Bad value for 'size' [ 1986.951821] tmpfs: Bad value for 'size' 15:25:52 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) [ 1991.460145] Bluetooth: hci1: command 0x0409 tx timeout [ 1993.508112] Bluetooth: hci1: command 0x041b tx timeout [ 1995.556072] Bluetooth: hci1: command 0x040f tx timeout [ 1996.470403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1996.471627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1996.473547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1996.524889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1996.525994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1996.527891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1996.666943] FAULT_INJECTION: forcing a failure. [ 1996.666943] name failslab, interval 1, probability 0, space 0, times 1 [ 1996.668600] CPU: 0 PID: 32876 Comm: syz-executor.2 Not tainted 5.10.172 #1 [ 1996.669476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1996.670528] Call Trace: [ 1996.670856] dump_stack+0x107/0x167 [ 1996.671314] should_fail.cold+0x5/0xa [ 1996.671795] ? getname_flags.part.0+0x50/0x4f0 [ 1996.672370] should_failslab+0x5/0x20 [ 1996.672849] kmem_cache_alloc+0x5b/0x360 [ 1996.673367] getname_flags.part.0+0x50/0x4f0 [ 1996.673923] user_path_at_empty+0xa1/0x100 [ 1996.674465] __do_sys_pivot_root+0x13d/0x14b0 [ 1996.675039] ? lapic_timer_set_periodic+0x60/0x60 [ 1996.675653] ? clockevents_program_event+0x131/0x360 [ 1996.676314] ? tick_program_event+0xa8/0x140 [ 1996.676832] ? is_path_reachable+0x110/0x110 [ 1996.677384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1996.678004] do_syscall_64+0x33/0x40 [ 1996.678440] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1996.679040] RIP: 0033:0x7fbccadf7b19 [ 1996.679485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.681648] RSP: 002b:00007fbcc836d188 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 1996.682553] RAX: ffffffffffffffda RBX: 00007fbccaf0af60 RCX: 00007fbccadf7b19 [ 1996.683392] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000020000180 [ 1996.684239] RBP: 00007fbcc836d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.685067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1996.685893] R13: 00007ffee38284cf R14: 00007fbcc836d300 R15: 0000000000022000 [ 1997.604099] Bluetooth: hci1: command 0x0419 tx timeout 15:26:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') (fail_nth: 2) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:26:16 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:26:16 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:26:16 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:26:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc4806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xece1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001f0020002cbd0000000000000001000004d20a006100000000000000000000000000000000000300"/64], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4008848) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {0x7ffffffe}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}]}, 0x148}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="84dd0000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b000100696d0000000f0002006e6574646576736d6d30000008000b0080000000080001007063690011000200303030303a30303a31302e300000000008000b00aeffffff"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x24000091) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/48) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000440)={0x60000019}) fsmount(r1, 0x1, 0x8a) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) r3 = openat$incfs(r2, &(0x7f0000000480)='.log\x00', 0x220682, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) pwrite64(r4, &(0x7f0000000900)="677f36b572bf83c92290985f0c2d5398c6773741e2cf88fedbf85d63b13281ab701f56fb9818646d73351077587565430c9712520d2c034edad6bfec999153664b839bd02f8bf365c275b05f238a27d108c0c3af10776b24a7fc6121b69c1048fa974d7c162a84554fdae44ec191031584d2dab75fb944cd95ebc05d31ed6e81c6545845d1703bb0c67080b6a26d3d765bd6e25a42a7634edf468c67ba40179743decf847345592bac0f465a738412e67f7cea6f42dd92df0a7c80045697c539c0ec4f0648c95195dcb3f4af9a1de64eaf0dd77f30a88691e6c7534ce7a79f677c33ea33f85ef2e068fcd02cad8b2c14aa7c80", 0xf3, 0x5) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x2f8}, 0x1, 0x0, 0x0, 0x4000090}, 0x4850) 15:26:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:26:16 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:26:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000000c0)) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, &(0x7f0000000280)=0x10000, 0xc3a, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) ioctl$FIOCLEX(r6, 0x5451) [ 2010.428779] FAULT_INJECTION: forcing a failure. [ 2010.428779] name failslab, interval 1, probability 0, space 0, times 0 [ 2010.430186] CPU: 0 PID: 32890 Comm: syz-executor.2 Not tainted 5.10.172 #1 [ 2010.430932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2010.431842] Call Trace: [ 2010.432149] dump_stack+0x107/0x167 [ 2010.432552] should_fail.cold+0x5/0xa [ 2010.432963] ? create_object.isra.0+0x3a/0xa20 [ 2010.433466] should_failslab+0x5/0x20 [ 2010.433870] kmem_cache_alloc+0x5b/0x360 [ 2010.434309] create_object.isra.0+0x3a/0xa20 [ 2010.434782] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2010.435336] kmem_cache_alloc+0x159/0x360 [ 2010.435783] ? ksys_write+0x21a/0x260 [ 2010.436207] getname_flags.part.0+0x50/0x4f0 [ 2010.436697] user_path_at_empty+0xa1/0x100 [ 2010.437160] __do_sys_pivot_root+0x13d/0x14b0 [ 2010.437663] ? wait_for_completion_io+0x270/0x270 [ 2010.438213] ? rcu_read_lock_any_held+0x75/0xa0 [ 2010.438724] ? vfs_write+0x354/0xa30 [ 2010.439137] ? is_path_reachable+0x110/0x110 [ 2010.439629] ? fput_many+0x2f/0x1a0 [ 2010.440042] ? ksys_write+0x1a9/0x260 [ 2010.440464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2010.441060] do_syscall_64+0x33/0x40 [ 2010.441480] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2010.442063] RIP: 0033:0x7fbccadf7b19 [ 2010.442485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2010.444550] RSP: 002b:00007fbcc836d188 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 2010.445369] RAX: ffffffffffffffda RBX: 00007fbccaf0af60 RCX: 00007fbccadf7b19 [ 2010.446178] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000020000180 [ 2010.446993] RBP: 00007fbcc836d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2010.447805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2010.448607] R13: 00007ffee38284cf R14: 00007fbcc836d300 R15: 0000000000022000 15:26:16 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:26:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x23, 0x101, 0x1000, 0x6}) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r5, 0x44, 0xfffffffffffffffb, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r10}, 0x0) close(r10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r11 = pidfd_getfd(r0, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r10, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r11, {0x2}}, '\x00'}) sendfile(r6, r7, 0x0, 0x100000001) 15:26:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') (fail_nth: 3) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:26:16 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:26:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, 0x0, 0x0, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:26:16 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:26:16 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) fallocate(r1, 0x44, 0x100000000, 0xffff) creat(&(0x7f0000000180)='./file2\x00', 0x14) openat(r0, 0x0, 0x501300, 0x16a) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd, 0x0, 0x9, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r2) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x0, 0x4, 0xffffffffffffff81, 0xfff, 0x7f, 0x5}, {0xa9, 0xfffffffc, 0x100000001, 0x7, 0x1, 0xd0e}], ['\x00', '\x00', '\x00']}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0)="041a3a4985d424bdce9675f286982a09f7fe7569cb2c6e71f89e8019678c585aa70cc9e2435235dcb0b3434020d0f4d5613bb8bde96608eaf4af1834720900b040007af6d3edc14cd7ab81c733b614b0835ac6af8173be3b00015a826f2562ae98feb0d40000f80000", 0xff69, 0x3ff03) setresuid(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r5 = getpid() sendmsg$nl_generic(r0, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000500)={0x460, 0x35, 0x100, 0x70bd2b, 0x25dfdbfc, {0xd}, [@typed={0x4, 0x70}, @generic="dc328f26bf50e0ef423f94cf7c9c857420823c926a6b47fdbd86e1d3c2993af24dcc231b619085dd43550bddc21ab1cf511cab17c66d4947ae3ff81924819d1e4fccdedebf5cf7a4c03f5dd4bd9789c1b357b07c270e5544df3c8df92806c375c2d3e9bc3f230a9859799f54a5b9c502190df6882cc0a78f500de9818d724cbda7f67930e2affcb23280816f74fc5fbfc5db0195078061bb1a61c2dd1aea2db7bcefaabe0f76f6ae3d58df426e42132f98aa869fbb72baae8092796d0a779aab44ac199a3a86d2e4b4", @nested={0xaa, 0x31, 0x0, 0x1, [@typed={0x8, 0x90, 0x0, 0x0, @uid=0xee01}, @generic="1be88c66c1ff5b4b3a1345e94cee8390ae41caa60a9988cac8c16d9bf14cc09917ea16056c5bb4c543231c5ddcae06a6cbfb7ffddebca01a5c511889eda3f9879e1600d3b6c6a48f2e430585d48cbc2df38e72e26a7fcc62f67d7938355115b019977c9dea30ca5593e7cc2a2868e6d2d343", @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@private0}, @typed={0xc, 0x5a, 0x0, 0x0, @u64=0x10001}, @typed={0xc, 0x78, 0x0, 0x0, @u64}]}, @nested={0x256, 0x31, 0x0, 0x1, [@typed={0x8, 0x5c, 0x0, 0x0, @u32=0x100000}, @typed={0xc, 0x4c, 0x0, 0x0, @u64=0x80000000}, @generic="fc50d76ec54ac6d80d4f15c6dc24fac19df2303003ab5b6b262c0b4c5cc180837d2290f25aca8354249808cc680007c7f50904e29c0dee7a532c3b6f8277d327712a27a40092de3225425bc238bcfebc1f654a11f08944d7c14a50fee405cfc0f6e79819d99df6d324530a5c6091560f4857d60219eb2ab3cee5d349020f9a8045680b421a49515c11e03bf10c94952245791cc0f015e3c7bc6d67fcb64e6fc815a3fefdfc90565ea051127079cc88f143a8d9315cbb95cbd84b04def79f40865b5e79a33c10e2ebd1e6961b55d785bb0ba64d298ce6fa", @typed={0x8, 0x5d, 0x0, 0x0, @fd}, @typed={0x8, 0x30, 0x0, 0x0, @uid}, @generic="0a7e3beea8b9ded1b1c48d6b8ddf06fb7ab3d6ee9caf59157a37d01556f3d378c1174520b244750cb163026dd6681ebf95c6eb9441da898f9933cb29ca3aeaca662f701fa9534abab73c01c4cfba0fdc980ba981f50f386b1882407c5c40dda5849e035a1e38311b37d54bac1fbfcba5c6a6086c6da016d932a9e91be2565c513847f7ce9232438bc0312c2bce72ce7a8872046d5e81396475b7f618d9fcf7c2e653fac2a3be68bc0096438998bf74b466890c998c2e3e0b322e4b6cd61f2b794a8ead3c945cdd090097bcb971b3f71e3386b97aa8d3b4", @typed={0x8, 0x39, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x2a, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x43, 0x0, 0x0, @fd=r1}, @generic="440282ed145d94e8473e9f3da1ac51d2a4870754e1e4169440beaaa041ced77f07bc84ab1d11095b62690ce849c5ef8dcd67eb6c352a53362fbb48ff9c408783dfc0e1eddc31292755a2b71318327bd0002793fc11d4c1ff3e68eef29c5ca71ca201e3e47bd4ff8b"]}, @generic="7e5c13aee7906c1addb8a57de029734a40625041f2ec3ee0b339ff35650a4ec445fd6a5e71f4a4e59b98b985f4fd2ee579924035181db51df608befadb946f25e829c42751a2e5dfcaaf31fcd043e19c11c896907e9bb2c6a5bcce8c66a268fcf4c4aa5c2af1e3a07d09e1076e4fca5a667b", @generic="6b91fde5acfe03"]}, 0x460}, 0x1, 0x0, 0x0, 0x10}, 0x40000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:26:16 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:26:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:26:16 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) 15:26:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, 0x0, 0x0, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:26:32 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020101000470008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000b9ea7015bcaa47325132510000ea70325103000000000041660069006c0065", 0x5e, 0xa00}], 0x110081e, &(0x7f00000002c0)=ANY=[]) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) chdir(&(0x7f0000000040)='./file0\x00') unlink(0x0) r2 = creat(&(0x7f00000000c0)='./file2\x00', 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x101080, 0x1) r3 = open(&(0x7f00000003c0)='./file3\x00', 0x5b5081, 0x45) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000001c0)='./file3\x00', 0x8, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) 15:26:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{}, 0x80000000, 0x8}}, &(0x7f00000002c0), 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4e, &(0x7f00000002c0)={0x0, 0x113e8, 0x20, 0x2, 0x298}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="3c977e5f4d4e11774720d9aba2283c30e28790d2418982a822d66ad3a0516b61fd81bb54f71baada1d0605bca61fcb5c0a34377eef405492339998757198b94576c1834bbcf33c62495c4e2a4ee4574b19b676bce4d23c312cf761f3556d96967c3f557d8e63f3b66b46a9779ab6c774840103c41db50353ebb674d1285b2754d4ff7b0dee1bb13067b0b9a8c5", @ANYRESHEX=r2, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRESOCT, @ANYRES32=r1], 0x98a) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000004000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000004000000f1d9a3a4a98491a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/256]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) unshare(0x48020200) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x4800, 0xd0) 15:26:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000085f42d27379e44ba9a8dcb77402e9f71010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x200000000000540}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d9f4655fd9f4655fd9f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000080)="111fc0d901000000803a0900803a09000000000006e5", 0x16, 0x20000}], 0x0, &(0x7f0000013e00)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4504, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x3, 0x6, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x220040, 0x108) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:26:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, 0x0, 0x0, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:26:32 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:26:32 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:26:32 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:26:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, 0x0, 0x0, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:26:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0900000011f1786629f12f808413590000002e2f66696c0400004ec47aad925e4b61f1ba2e1d113c4d2ec0d6606d84578763f8c611cd62dc90d2fa367d5122c3cbc18925e9e92ef0c5298248cd2e103bb5e0b17ebbef672e8d004291c89edbd3cf3f7455d8ef8bf2a63abd7bb41302182abdcd7fe80baf2b57175479a905233669e50d264dd32ee22850f67b6daf97ace42586d19ec76a14b01654a4b19874f351b9c64d05d9f7093e038e5a6ad569e62a6191202214db684ca90d16ece80070b321512ac103fcf126a3cfd23f22bea71775542277fe2355961f3ff057741037c7eaf6"]) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x5, 0x2, 0xa, 0x0, 0x0, 0x5, 0x19, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x10810, 0x10000, 0x8000, 0x6, 0x9f5, 0x1000000, 0x7fff, 0x0, 0x80, 0x0, 0x3f}, 0xffffffffffffffff, 0x1, r0, 0x8) execveat(r2, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140)=[&(0x7f00000000c0)='%$[^+\x00'], &(0x7f0000000600)=[&(0x7f0000000180)='^:\x00', &(0x7f00000001c0)='&\x00', &(0x7f0000000200)='\x00', &(0x7f00000007c0)='\x00J\x9aG\xae\r\x85\xae\xe7\x03\xc4\xdahD\xd3\xe3f\x9a.\x10\xd4\xfd\xc5\x9d\xdd\x02_\xc6+\x04@\xcd{~@fG\x9c\x06+g\x02\x18\xce\x9c\x96\xc7\xc4\xfeYsBc\b\xb5\',\xa0\xaf\xba\xa5\x94\xb3\x8exsn\x9d\xb6\x9a\xcd\x9d\x97Ct\xf2Q\\\x7f\xff\x90\xe1l\xa6\xaecs\xbcT\xb0^\x8f\xf8e\xd0\xdf\xa1\xfet\x0f\f\xe8\xa8\x9e\xa0\x1a{-\xac1Uw\x02\t\x9c&\xc1\x95\x83{\xbc-\x9fM\x92&L\x84{\xa5\x1bM\xd3g\xe7\xa3g\x12\aV^\x89\xc8k\x14H\xb1\xfac\xcb\"\x87ZJ\xf6N;\x91\xd7g\xc2\xba`:\xf7\x04\xb1;1\x98]\xadlt@fU\x1bPE\xf7\x9c\xb6\xf8n~D;\x1c\x19\xc2\x83\x8f\xb1\xc4Os\xc1p\x93\xa2As\xd7\x11w: \a\x95\x94\xf8\x9fP\x90m\x19\xbd\x97\x84\xbf\x97\xdd+\xe4jC\xc8\x1c\\4\xad\x045b\xb4\xb7p\xd5p0\x15LO\xca\xf2f\f\xe7\x96:\\\x99\xdc\xa9\xb2\xe2\x0e6f\xd9\xe3\xb8\x86:\xc9h\xc0\xc2\x9c\x03ba\xba\xcf\xccyn\xa5f\x82\x15\xf9\x8f*Ib\xc1B\xbb,\x86\x96\x8e\xb6\xefd\x916\x99\xac\x86#T\xe0*\x93', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='-&%\xa1[\x00', &(0x7f0000000340)='{\x00', &(0x7f0000000040)='\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='{-}[\x00'], 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x200000, 0x0) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) 15:26:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, 0x0, 0x0, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:26:32 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:26:32 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) [ 2026.626008] perf: interrupt took too long (5067 > 5007), lowering kernel.perf_event_max_sample_rate to 39000 15:26:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, 0x0, 0x0, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:26:32 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) [ 2031.396127] Bluetooth: hci1: command 0x0409 tx timeout [ 2033.444072] Bluetooth: hci1: command 0x041b tx timeout [ 2035.492062] Bluetooth: hci1: command 0x040f tx timeout [ 2036.559690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2036.561567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2036.565324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2036.590764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2036.592469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2036.595119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:26:59 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000040)=""/18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6474764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:26:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140), 0x0, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:26:59 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x0, 0x3, 0x8, 0xfffb}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0xc004) pipe(&(0x7f0000000280)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffb, 0x12}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f0000000380)=ANY=[@ANYBLOB="7472617d733d756e69782c63466368653d6c6f6f73652c613ab3f4b73d2b2c2c736d61636b66736465663d706970656673002c6063723d3030303030303069643e000000000000000000000000001000", @ANYRESDEC=0x0, @ANYBLOB="2c66736e616d653d7069046566"]) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) dup2(r0, r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0xbc594d8ca42a9cbc, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r5) 15:26:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x5, 0xf7, 0x20, 0x80, 0x0, 0x8000, 0x1820, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x180, 0x3, 0x7, 0x7, 0x5, 0x4, 0x3, 0x0, 0x8001, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0xb) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "4fa2f8201eed6e500c32342a227989f18a88ab65bad4c23a441d66f462f1df77bc777d160562da8c50431b2a204f36c6ed27b00215909d75417aa68c9029c5fd", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92"}) fcntl$addseals(r0, 0x409, 0x7) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r4, r5, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x3, 0xff, 0x20, 0x7, 0x0, 0x101, 0x2108, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x8, 0x7f}, 0x10000, 0x7, 0x1, 0x0, 0x6, 0x7b, 0x5, 0x0, 0x8000, 0x0, 0x6}, r5, 0x7, r2, 0xa) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = accept4$unix(r2, &(0x7f0000000280), &(0x7f0000000300)=0x6e, 0x80000) dup3(r3, r6, 0x80000) 15:26:59 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:26:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140), 0x0, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:26:59 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:26:59 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:26:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa0800450000600000000000019078ac1c14bbac1414aa0500907800000000410000000000000000040000ac1414bbffffffff441400017f003d623f96c7fff392000100000000e000000100000000441c00037f00000100000000e000000100000000e000000200000000"], 0x0) 15:26:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140), 0x0, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:26:59 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:26:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140), 0x0, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:26:59 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:26:59 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:26:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140), 0x0, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:26:59 executing program 5: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000200)=""/255) openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x200, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000001800)={[{@block={'block', 0x3d, 0x200}}], [{@obj_type={'obj_type', 0x3d, '/dev/null\x00'}}, {@subj_user}, {@smackfsfloor={'smackfsfloor', 0x3d, '{'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4, 0x3, &(0x7f0000000140)=[{&(0x7f0000000080)="17247f7f7b1e144bfcb1311fde426890c05354dda553aba0e8532e46379af2eecfe1d607e0816dc0b724da63fe144e57d7663f4b797d1c21921d66af6256ea3a9c95acb64cfeca92168603cfea01c2bd6187e5df693756376f495a8ae8eeee0710724c73c38ac015740e6a31f4db1d14e75de12b0b3db7646691d5c34872abe344719af05f6219c2fc54c4db8f827d7d9a38c4792e7d", 0x96, 0x200}, {&(0x7f0000000640)="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", 0x1000, 0x2d}, {&(0x7f0000000300)="6ec049c2380d62c108be28aac25b9e1e899084da533c91950730f4f0dc6dfe3cf15d61e4ee6e9acb6b3f0d7372a193695b179b38f1ed9551aad3ec9acdc9956f956951032fba8beda088eda728217016d7a2214922e546a3cc4d1bbd7a5043f22140cc783ebe1cb2f29f030c1968b0b9b594a36043115b1e7617fd8b725a572bb7cc71069da651c17369963dcd9fa7281b8d7ef914d91b4d38f0eb59a691a03a2281dedf12d7c73779575e0c5f5c6bf2518720f628abde2e28fd3d00811917ac19d054f557b84fbfc5055e1afebde535f6c31e8af3f5f7", 0xd7, 0x5}], 0x100000, &(0x7f0000001640)=ANY=[@ANYBLOB='uni_xlate=0,hash,uid=', @ANYRESDEC, @ANYBLOB="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"]) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) [ 2054.139445] EXT4-fs (sda): re-mounted. Opts: (null) [ 2054.169520] EXT4-fs (sda): re-mounted. Opts: (null) [ 2058.532046] Bluetooth: hci1: command 0x0409 tx timeout [ 2060.580123] Bluetooth: hci1: command 0x041b tx timeout [ 2062.628115] Bluetooth: hci1: command 0x040f tx timeout [ 2063.798123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2063.800279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2063.804375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2063.859501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2063.861329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2063.864733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:27:24 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:27:24 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:27:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140), 0x0, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:27:24 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x80, 0x40, 0x7, 0x0, 0x4, 0x200, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x6, 0x5}, 0x818, 0x3, 0x3ff, 0x8, 0x100, 0x8, 0x0, 0x0, 0x5, 0x0, 0x1}, r1, 0x7ff, 0xffffffffffffffff, 0x8) waitid(0x1, r1, &(0x7f0000000380), 0x2, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) linkat(r3, &(0x7f0000000040)='./file0/../file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x400) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') r4 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x5f, 0x6, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xd46f, 0xfffffffffffffffa}, 0x40200, 0x8, 0x4, 0x7, 0x80, 0x8000, 0x9, 0x0, 0xa4, 0x0, 0x9}, r4, 0x9, r2, 0xa) 15:27:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010000000000000000000000000005000000000000000c00008008000000000000019879f01416ebbf19c43076f958e0c78b422351108b5a760abe0d9ee85a01aa16805a493b95e0546661ff756ec9192aa1b67f2aa421ff20ff2b71374df4512b1ff548e965524625b5ab70aa2a1b42a24df9524a7aad7b115daffc004fb436b0fc27d88a9b20a255ad5dfc7da29064dc4764d4d7e46cc5d6d4a7bd43739ce3ad613d164621eb585aef90d2872a7244de067fd98160194d4d45c81bc542d0d4ec8d9d2a4dd9d19ea1b2c9a3dc9f43bd28fbf8b87cc446c3d5440879b89dc184ae21fb602e4b330a1b95"], 0x28}}, 0x0) 15:27:24 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:27:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:27:24 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0xffff}]) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) io_setup(0x0, 0x0) 15:27:24 executing program 5: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) connect$802154_dgram(r2, &(0x7f0000000140)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000600)={0x53, 0xffffffffffffffff, 0x0, 0x3, @scatter={0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f0000000340)=""/238, 0xee}]}, &(0x7f0000000480), &(0x7f00000004c0)=""/214, 0x20, 0x10000, 0x2, &(0x7f00000005c0)}) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r3, 0x30d, 0x2, 0x8}) r5 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc1, 0x20, 0x5, 0x6, 0x0, 0x236, 0x4840, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xe5d, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x429, 0x6, 0x40, 0x1, 0xfffffffffffffffc, 0x9, 0xff, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, r4, 0x1) r6 = getpgrp(0xffffffffffffffff) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform', 0x4000, 0x109) kcmp$KCMP_EPOLL_TFD(r6, 0xffffffffffffffff, 0x7, r5, &(0x7f00000001c0)={0xffffffffffffffff, r7, 0x7fffffff}) 15:27:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:27:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:27:24 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:27:24 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000080)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) close(r5) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r7 = getpgrp(0xffffffffffffffff) fcntl$setown(r6, 0x8, r7) 15:27:24 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) [ 2083.492061] Bluetooth: hci1: command 0x0409 tx timeout [ 2085.540062] Bluetooth: hci1: command 0x041b tx timeout [ 2087.588103] Bluetooth: hci1: command 0x040f tx timeout [ 2088.889174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2088.891299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2088.894527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2088.943324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2088.945030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2088.948223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:27:51 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r4, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r6}}, 0x0) 15:27:51 executing program 3: syz_io_uring_complete(0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0xd4100) memfd_create(&(0x7f0000000240)='\x00', 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x111340, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x2, 0x3, 0x0, 'queue1\x00', 0x7ff}) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) write$sndseq(r0, &(0x7f00000002c0), 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x300, 0x4) write$sndseq(r2, &(0x7f00000001c0)=[{0x7, 0x7, 0x9, 0x0, @tick=0x100, {0x8, 0x5}, {0xe6, 0x20}, @result={0x5, 0x9}}, {0x1f, 0x3f, 0x7, 0x1, @tick=0x7, {0x1, 0xdd}, {0x9}, @note={0x1, 0x81, 0x81, 0x3, 0x1}}, {0x1, 0x9, 0x4, 0x81, @time={0x6, 0x5}, {0xff, 0x8}, {0x2}, @raw8={"beba3e0e6ca84586368a5249"}}, {0x9, 0x8e, 0x81, 0xff, @tick=0x1, {0xe0, 0x90}, {0x9}, @quote={{0x5, 0x1}, 0x2, &(0x7f0000000140)={0xd1, 0x2, 0x5, 0x1, @time={0x7, 0x10000}, {0xa0, 0xcc}, {0x8, 0x2}, @raw8={"f5b7bb1a0eb8600ba89aebd6"}}}}], 0x70) socket(0x9, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 15:27:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:27:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:27:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:27:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200001, 0xb9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="6649280e51d24645e9fe1dd22f029a9769f22d99734e770ca7dceeb067b725f729b55b559ccb85ef606f1e8cefc64cd0698000ccaaa806eef75b60d26928f0b296eb9c81516f731f5c79c87ff97a4cad3595aa0a7ec30a6aa9e625d2e37197ee21aa6d2c53c7be5c21df1407bd04b72acd7265718955e0c3998b3923524034a2b2de13c7eb878d445af177c083370a8f67be2930d3e0bb58645c47050b09b267b883cb5f3d24daad6b17506598fd75cdf96f8898933adc7625fcb2cd960398", 0xbf, 0x8000, &(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) r2 = creat(0x0, 0x0) open_by_handle_at(r2, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0) sendto$inet(r2, &(0x7f0000000040)="78acc2c54b875363db15ab9cb3edee55128fd8412db1bc567bf26525987f766af1859c06a104fc3870a1cb97726ea0e5db0ce46bd07b4a8da5588ee5", 0x3c, 0x4000000, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}]]}, 0x5c}}, 0x0) r6 = socket$inet(0x2, 0x4, 0x6) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in6=@empty, 0x4e20, 0xff, 0x4e21, 0x8, 0x2, 0x80, 0xa0, 0xff, 0x0, 0xee01}, {0xfffffffffffffe01, 0xfffffffffffff000, 0x4, 0x8, 0x0, 0xffffffff, 0x5, 0xa1ab}, {0x8001, 0x8, 0xfffffffffffffffa, 0x10001}, 0x9, 0x6e6bbe, 0x0, 0x1, 0x6}, {{@in=@private=0xa010100, 0x4d2, 0x32}, 0x2, @in=@multicast2, 0x0, 0x1, 0x0, 0x7, 0x7, 0x1ff, 0x1}}, 0xe8) 15:27:51 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:27:51 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:27:52 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r4, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r6}}, 0x0) 15:27:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x80, 0x40, 0x7, 0x0, 0x4, 0x200, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x6, 0x5}, 0x818, 0x3, 0x3ff, 0x8, 0x100, 0x8, 0x0, 0x0, 0x5, 0x0, 0x1}, r1, 0x7ff, 0xffffffffffffffff, 0x8) waitid(0x1, r1, &(0x7f0000000380), 0x2, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) linkat(r3, &(0x7f0000000040)='./file0/../file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x400) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') r4 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x5f, 0x6, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xd46f, 0xfffffffffffffffa}, 0x40200, 0x8, 0x4, 0x7, 0x80, 0x8000, 0x9, 0x0, 0xa4, 0x0, 0x9}, r4, 0x9, r2, 0xa) 15:27:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:27:52 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:27:52 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:27:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:27:52 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r4, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r6}}, 0x0) 15:27:52 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:27:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x25) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x40010, 0xffffffffffffffff, 0xf388000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) pkey_alloc(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000100)=0x3a, 0x0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x4000000, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000140)=0xffffffff, 0x4) [ 2111.460110] Bluetooth: hci0: command 0x0409 tx timeout [ 2113.508118] Bluetooth: hci0: command 0x041b tx timeout [ 2115.556088] Bluetooth: hci0: command 0x040f tx timeout [ 2116.976304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2116.978445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2116.981266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2117.044724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.046753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.049586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2117.604139] Bluetooth: hci0: command 0x0419 tx timeout 15:28:19 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:28:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:28:19 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="2f6465000000000100156714064cdc0b5f60c3b033cb6dbaa8cd8ad2b71e0dc27ea500343bdbed103ce3cd784b21365c6fe955e87347009e2a582b0192c689e59b49c3f7357aa67acb929742b6e482d65449339d0219d52b0191de5d55ecc576b4e421f918e4c0b321eb3bb546e9555c2d0c33799519cbff2347c0b0daa5da5efd1bc7979e3b114170712eba1954082475bc962920b7d797b06a2a0fd5d267515b36"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:28:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:28:19 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:28:19 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) setitimer(0x2, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) timer_delete(0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 15:28:19 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000005940), 0x0, 0x0) readv(r0, &(0x7f0000005a00)=[{&(0x7f0000005980)=""/115, 0x73}], 0x10000109) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) openat$cgroup_ro(r6, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') 15:28:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:28:19 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:28:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = geteuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/i2c_algo_bit', 0x40000, 0x310) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x20, 0x9, 0x8, 0x9, 0x0, 0x3, 0x0, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp, 0x6080, 0x1, 0x7, 0x9, 0x8, 0x7ff, 0x8, 0x0, 0xfff, 0x0, 0x1000}, r0, 0xc, r2, 0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x13) 15:28:19 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:28:19 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:28:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {0x0, 0x0, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:28:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) fsync(0xffffffffffffffff) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x16, 0xd, 0xb, 0x5, 0x81, 0x2, 0x80}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0x0, 0x0, 0x8f6}) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/159, 0x3c}], 0x1e) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000001c0)={0x1c, 0x11, 0xb, 0x9, 0x8, 0xf1, 0x0, 0xf0, 0x2}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0xffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x10d080, 0x0) 15:28:19 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:28:19 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000140)) 15:28:19 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x2000000000000167, &(0x7f0000000100)=[{0x2, 0x3, 0xff, 0x6}, {0x32b4, 0x1, 0x9, 0x2}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0xe802, 0x6a, 0x20, 0x6}, {0x101, 0x6, 0x8, 0x9}, {0x6, 0x0, 0x81, 0x8}]}) readlinkat(0xffffffffffffffff, &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)=""/238, 0xee) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3, 0xee9}}, './file0\x00'}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) close_range(r3, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)) [ 2138.724098] Bluetooth: hci0: command 0x0409 tx timeout [ 2138.916033] Bluetooth: hci1: command 0x0409 tx timeout [ 2140.773094] Bluetooth: hci0: command 0x041b tx timeout [ 2140.964030] Bluetooth: hci1: command 0x041b tx timeout [ 2141.436193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2141.437227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2141.438906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2141.451857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2141.452761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2141.454277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2141.701461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2141.702476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2141.704222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2141.727204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2141.728437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2141.730412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2142.822111] Bluetooth: hci0: command 0x040f tx timeout [ 2144.868057] Bluetooth: hci0: command 0x0419 tx timeout 15:28:43 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:28:43 executing program 5: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYRES64=r3, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES16=r4, @ANYRESHEX, @ANYRES32, @ANYRES16], 0x0) 15:28:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x787102) r1 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x180) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012abd7000fcdbdf254a0000000f00a8007365630722646e616d650000"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20040080) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000011) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000011c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "0792ade4eff3d51ae1c35206d8098758db6a56ba977a856d7c576d40c2e65ca2d5773618a27635f95bd9c12b6bdda484bb130ef53e11060c0c7d9a04e184707c41a839dbdac13e41c451f4d88987a291"}, 0xd8) dup3(r3, r4, 0x0) 15:28:43 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000140)) 15:28:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:28:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:28:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) quotactl(0x2, &(0x7f00000000c0)='./file0\x00', 0xee01, &(0x7f0000000280)="526feff5598b75f89fded12c691342d348af594a300ecf86079ab0d6d97b12cbbc325e7ab0ba59721a54a8c13238097c1cf50f359a1976900f8ed9c0d6eab2808726c38211802160dd3bd8670caff96d0107bd63bbf526f6eb7457968a8738ad4d268f6c653b89b443ebf1f90611efe93a5496cea34040e6552fcfd25f5edec893e5fc8766432ee7fb538035d3d4ab3dfd2946e296874c8fa1200088c79cf476fdd6d0c9f494c2b39d27ec00fadcdef1c595a056579c40d28cd6538127") chown(&(0x7f0000000540)='./file0\x00', 0xee00, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount$9p_unix(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0/../file0\x00', &(0x7f00000006c0), 0x1102061, &(0x7f0000000700)={'trans=unix,', {[{@uname={'uname', 0x3d, '![\xa1:'}}, {@cache_none}, {@access_client}, {@cache_loose}, {@debug={'debug', 0x3d, 0x9}}, {@uname={'uname', 0x3d, '9p\x00'}}, {@cache_fscache}, {@fscache}, {@cachetag={'cachetag', 0x3d, '@#]'}}, {@fscache}]}}) mount(&(0x7f0000000d40)=ANY=[@ANYRESDEC=r1], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x2001018, &(0x7f0000000200)='^},\x00') syz_io_uring_setup(0x3dc, &(0x7f00000002c0)={0x0, 0x2023, 0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_mount_image$nfs(&(0x7f0000000880), &(0x7f00000008c0)='./file1\x00', 0x9, 0x6, &(0x7f0000000c40)=[{&(0x7f0000000900)="cdce419bf1107441cbe4b0c546e9409a2d594ddc83b19dea7ecc22873d829624af3c65be16f0f5aea1cb13f915922eb338acd60dcfd223a0ab447b2482312bdb8edc827a710ee65caf90639a6add6e2b959afcf02ae8e6b8f9383f46a6f41cc7e47e5e0d7e1abe", 0x67, 0x1}, {&(0x7f0000000980)="8ba26856ef9bb3f510971c40e73a21feeb9604ce91deb6009da51729b5b3da23c0b550a3a79c280d8c504b0ecdcffbffcae1319fce86e3369859a4c21aa51f6894be42cacbdf758ce02f9dbd8317f616fb086fed935872cc64d38d66bfbf1069916241f6703ea53ab80f60b957e78fbd014c0bc995d03ce455034baea6c89cbed7d375132a1ab41218e3ab68635a7a66d24fb446ff191c350f5d1b3b436dee17c18ad0d8668ae84c1f45ab21883cf93ddc9bf8a4b0cfbe9b14ef63e14bf9a06dc402a8b7c05b4e2c60eddaadda5ebb08c1bb9dd45de558", 0xd7, 0xfffffffffffffffd}, {&(0x7f0000000a80)="a467102df75412d64a0cc691dd77b78d0ecfeca3abacd6fe01212e5905e452124174019ab3152f1af26d1fb2658f405a41953918f3b8d2747eafa94cdaea55e7f50e2676fe5600156360d4", 0x4b, 0xfd0}, {&(0x7f0000000b00)="6171318f36e99f62c76f3e24d5c9", 0xe, 0x1f}, {&(0x7f0000000b40)="a682ef2abd5f2fa660af3e5ae00bfcbc2ec9413def5ca16f9b67118ecba088ea3ba02612698eb62e6bb199469ac7fcac6581d854f5e2b9d36414fd87bb9e995151acf476e7cb1318602880a81bf0725747dced4b566fde6887a3e25df8feab18640e03830c2ecb1d2a025f25c7b1d9a0395b8525", 0x74, 0x100000001}, {&(0x7f0000000bc0)="2db76b728268eb5070639fc4383c69bb2acb246f1b30f61a7a1789beec4a891a2ae3825ce3eabbe20b34df6e9245224b8cd8aa42a3bda0cea8fc45f18730889bec9ffa7c8d22d5a965233d00722b200fa00febc65fa4d289f5cde5ee0088a5981f5beec7ff6c8613d19d02f878c70efbbf0f65106b2b7745be7f099eff8b59", 0x7f, 0x101}], 0x1010, &(0x7f0000000d00)={[{'reiserfs\x00'}, {'pipefs\x00'}, {'\\-(-'}], [{@permit_directio}]}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) stat(&(0x7f0000000900)='.\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) syz_mount_image$tmpfs(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x9, 0x7, &(0x7f0000001280)=[{&(0x7f0000000e00)="a60edde43f9e0c894a8e30", 0xb, 0xc5}, {&(0x7f0000000e40)="df15afc2cc8c11d7241e6c156f70c18d68a899ddd71293f820eb4226d368b54b3110dba1837865113b1f26c324e576c9dfed4f829ed53487ca9696c96a2e5e88d708809977461ec6c9d2017d6cdb0d46f87a92429037f9337e9dfb7d6aa0a1f6c046cb9c8b508045752d8f99ac0edbfe5bc05880fd7bbdc5241aad944492a243d3584c2b7944ade2774a11ee23fe95560b4f121bc250eddcc7f9394631622bb575fd8c7a45a1340631bbafd85b866e5dc0eccf35ca6f2dda6bc18f5cee78bb3e6870e1e314c30126f950e04e4ffc5fc6018f8173001d89723ac50e3540c0edba463869ddbd8a74d2e873a1ade808d7b64fd6a6e35588e8de5b218abc", 0xfc, 0x3}, {&(0x7f0000000f40)="178506bdf91c9bc15fe8ce7a330d6ee14f4ab6c8b2fe3688facb9ddb7227af4260da847714d074e124dfa6ccca48b9cb7a3ad5ca1106b207f1d63c469f4988083ff4f61c107415ec06a7d3b6016b35017e448fab2cc94ddf3048890610a51e42441c317055b8a3235868200175ed0dc6f853f6c203ad607d00fd4bd3143a", 0x7e}, {&(0x7f0000000fc0)="f51a3528acce518e8e5c72760efba090cc332c1c22036c279c2e9a9ef36c92909a68c7e1437754b2e5fd99781a401dc129066514fc9986e089e0fc7044b5358d7f3e4a8529d467bcc60d08013f038b00938063b1ec51f4d78e108b4083652ef59db10acdb54a5fec459f50b10cdf681c404dcd8c682f99a993178163ab9fb3502c22d7ea84c0e26bf05604f53ec1aa26e35cc447c058d0f351209a5207fc57b72d4909a6d92572e34dce832d73e5fdac91a893b7383848b6c27cd9e0bc9741c1dd63beadffb421863d561152cd24d17be2775c4be573cf96", 0xd8, 0x574}, {&(0x7f00000010c0)="624ea009176fb83ffc1a56af299140fbcaf6c01e6b3385c9ae4971b907fe23d423a1e67315b20189471a5880a9b56e8ce4a0570a5729", 0x36, 0x8}, {&(0x7f0000001100)="6a62ceb099f8304965a22f702bd6ec9f112d96e53182e56d15f9b19924c89a8692efb8a01123d797e2a0e160faec017a59a72cd28f17cb173a1512388245ece5034ba46e87af81a8ff26a02b4d907042f6efd6f83c2fe000d4ead21a965241e69ad8ef252913d68d5996624c4bd2d97a1e11bc7fc56340fe4adbd23a19b940e8a477c3aa13431f1ed282d2939b6f916e917d3c7f4967c6dfb91cb7ab40b7e7b7e61f32567bc00fee978d69602e68a5759de3671ff9f96e424420bc6d96598b1dee17", 0xc2, 0xffffffffffffffe0}, {&(0x7f0000001200)="4284d3086506d3302eeb7b7c3e1efba0d69ecec4fa05211fa99d8de8b3ec5043e91e3bca0db12ac5fade2c135f3b0ac93c1175901dcb5b928b740d0cc25e988c3a7969598bb741fef823ff40ee83e5738c5c464257b551ee4e51845a5b22bfa9ed1b8b9e34f36db89d5d", 0x6a, 0x7}], 0x0, &(0x7f0000001340)={[{}, {@nr_blocks={'nr_blocks', 0x3d, [0x67, 0x36, 0x33, 0x6b, 0x32]}}, {@gid}, {@nr_blocks={'nr_blocks', 0x3d, [0x6a, 0x37, 0x78]}}, {@mode={'mode', 0x3d, 0x5}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@euid_gt={'euid>', r5}}, {@permit_directio}]}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x11}, 0x0) mount$bind(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x10000, 0x0) close(r4) getsockname(r4, &(0x7f0000000580)=@qipcrtr, &(0x7f0000000600)=0x80) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x28000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x3, 0x3}) 15:28:43 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {0x0, 0x0, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:28:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, r1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000440)=ANY=[@ANYBLOB="08000400000000003dda8d5c787e6876a952fd14e31d85dca62e668823f985f0e382e72428100d6d5997ad50b6087bc9137ea00ac7d99c0157005b43e30a7a8be8b4d8adc234b69d6acfd40773fd5387d42dab52b4a9aa629e9f9b4ffbfa6a3459509d2d60a189d21bbcbec3d46c4166695cceb0a41465af"], 0x20000148) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) read(0xffffffffffffffff, &(0x7f0000000140)=""/205, 0xcd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfec4) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8010) pwritev2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001f00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x68, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x80) [ 2157.614740] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:28:43 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:28:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000002c80)={0x0, 0x10001}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0x0, 0x8, 0xfba, 0x3, 0x4}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) fallocate(r3, 0x44, 0x100000000, 0xffff) r4 = openat(r2, &(0x7f00000000c0)='./file1\x00', 0x501300, 0x16a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x100, 0x0) openat2(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x4, 0x4}, 0x18) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000180)=0x3) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000380)='./file1/file0\x00', 0x8, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x2, 0x7, 0xfffffbff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r0, r5, 0x0, 0x80000001) [ 2157.702607] selinux_netlink_send: 28 callbacks suppressed [ 2157.702627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=35918 comm=syz-executor.5 15:28:43 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000140)) 15:28:43 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {0x0, 0x0, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) [ 2157.730278] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:28:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2010a2, 0x102) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=@ceph_nfs_confh={0x10, 0x2, {0x100000001}}, 0x40000) 15:28:43 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:28:43 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500), 0x0, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:28:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2010a2, 0x102) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=@ceph_nfs_confh={0x10, 0x2, {0x100000001}}, 0x40000) [ 2162.789270] Bluetooth: hci1: command 0x0409 tx timeout [ 2164.836059] Bluetooth: hci1: command 0x041b tx timeout [ 2166.884075] Bluetooth: hci1: command 0x040f tx timeout [ 2167.937364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2167.939723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2167.943229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2168.010844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2168.014019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2168.017595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:29:09 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500), 0x0, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:29:09 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:29:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:29:09 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00a0556d970e26aa5bbabca84d7d69f3be739906c6bde37e28c22097722f6a94431602d0bed0396d0ae1d583085c5b0ea8e0794e42178bad49c380fe91e5b144472a1a02e94f1349ffd19d4cca5a60959a542d58dc07bb4856a498c8ff3aac64bb479744b41a2c0d1413a431e37e8e4308dc1b3a1236f3b844b829822ce148b9d4450bc42064921b0065cbee0d82b0b7f79d14a3ed61e79193eed5998b6f"]) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000640)=ANY=[@ANYBLOB="ebc80c4ce5d68d4f2a88586ec211000000010000001800000056cffa2bee971ad75b58de69adf19a3b557b9df83022b544fdbafa60fef5e6e39b6fe0cbd18f1452fcbd62c094605d4f43643198f676a7608dc910baa5fa6dc2d1afc3cc2743d82db09067311edb20c24e42ea35f4be9a4c97af28bc7090699a4697cfca484c88c783c869893336e16666a1cb3209d7beaf3885d5a53052ed06eac955346bfdec7488f1ecaf0e617ceb9588fd6c1ca849811f7f6f11e606f17deeeb0baaf12c4591a6ce96ec58a6510fed5633a55da319e3da22788ca94788de266b7375c682f277b6f6c85f6f28ee2eac4fec17c162ec4a4e5011ee1c8f58e7", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xd, &(0x7f00000004c0)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x0, 0x0, "d1e3092eb94018fff573e4cfd2821799ea8563bd475102d18fe15fe2967de4e944721a6b45d580e0fcbc9405653f2d27857f300011e33cd1799fbb2952bb6f8fdd3d3fb79348bd9e7f136d4c15eea87a"}, 0xd8) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x4e1e, 0x8e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10000}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) 15:29:09 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:29:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:29:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:29:09 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5cb0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0xc4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x28000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8081) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x14}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x15, 0x24, [{0x53, 0x1}, {0x9, 0x1}, {0x48, 0x1}, {0x6c, 0x1}, {0x4, 0x1}, {0x24}, {0x16, 0x1}, {0x4}, {0x48, 0x1}, {0x12}, {0x24}, {0x18, 0x1}, {0x16, 0x1}, {}, {0x3}, {0x5}, {}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xa3}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x20}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x3}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x80}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4048014) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x28ad02, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) r6 = signalfd(r2, &(0x7f0000000ac0), 0x8) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b00), 0x101400, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000b80)=0xc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x19}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8, 0x52, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4025}, 0x50) perf_event_open(&(0x7f0000000cc0)={0x2, 0x80, 0xab, 0x20, 0xf9, 0x20, 0x0, 0x5, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_config_ext={0x8001}, 0x40800, 0xfffffffffffffffa, 0x2, 0x2, 0x5, 0x6, 0xc4e, 0x0, 0x3, 0x0, 0x100000000}, r8, 0x3, 0xffffffffffffffff, 0xa) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000d40)=0x1) r9 = openat$cgroup_procs(r7, &(0x7f0000000d80)='cgroup.threads\x00', 0x2, 0x0) fstatfs(r9, &(0x7f0000000dc0)=""/162) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r6) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x60, r10, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000001) 15:29:09 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500), 0x0, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:29:09 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000001640), &(0x7f0000001680)='./file0\x00', 0x3fe1, 0x1, &(0x7f0000001940)=[{0x0}], 0x80c4, &(0x7f00000019c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, '-]{/\\+'}}, {@smackfsroot={'smackfsroot', 0x3d, '%'}}, {@measure}, {@hash}, {@subj_user={'subj_user', 0x3d, '.'}}, {@pcr={'pcr', 0x3d, 0x3}}, {@subj_role={'subj_role', 0x3d, '*\\.[\x9e},*\xb6'}}, {@fsname={'fsname', 0x3d, '\'$\\'}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x10001) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), 0xffffffffffffffff) 15:29:09 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:29:09 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:29:09 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x428, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) ioctl(r3, 0x0, &(0x7f0000000340)="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") fcntl$setown(r3, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x181000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4890}, 0x4800) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x5dfa64cc, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xd0002000}) readv(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) [ 2184.143229] ALSA: seq fatal error: cannot create timer (-22) 15:29:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') chdir(&(0x7f00000001c0)='./file1\x00') r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) mkdirat(r0, &(0x7f0000000280)='.\x00', 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) truncate(&(0x7f0000000000)='./file1\x00', 0x7ff) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/249, 0xf9}], 0x1, 0x9, 0xffff0000, 0x14) 15:29:09 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x201, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:29:10 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) [ 2184.300807] ALSA: seq fatal error: cannot create timer (-22) [ 2189.029208] Bluetooth: hci1: command 0x0409 tx timeout [ 2191.076121] Bluetooth: hci1: command 0x041b tx timeout [ 2193.125071] Bluetooth: hci1: command 0x040f tx timeout [ 2194.182708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.184491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.187556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2194.245376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.247196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.250434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:29:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:29:36 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:29:36 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x201, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:29:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:29:36 executing program 5: sysinfo(&(0x7f0000000040)=""/8) sysinfo(&(0x7f00000000c0)=""/41) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) openat(r2, &(0x7f0000000140)='./file1\x00', 0x101040, 0x44) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x107142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x2) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="2600000000000010"]}) recvmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x10041) sendfile(r3, r5, 0x0, 0x20d315) 15:29:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x93, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x100}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x20000}, 0x1c) syz_open_dev$sg(0x0, 0x0, 0x82801) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e24, 0x1010000, @loopback}}, 0x0, 0x0, 0x5, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb9dcc0d8da3a4f6f42444a1948f422c8d8d2d8bba069588783e32b713"}, 0xd8) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000200)=0x7, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) read(r1, &(0x7f000000d8c0)=""/182, 0xb6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x9e5ec91796baa78a, 0x0, 0x2, 0xd19, 0x20, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x10, 0x9, 0x3ff}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000240)="000000000000f5ffffffffffffff00", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="000000000000f5ffffffffffffff00", 0x20) 15:29:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:29:36 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:29:36 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:29:36 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x201, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:29:36 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:29:37 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x302, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:29:37 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:29:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:29:37 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:29:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) [ 2215.716062] Bluetooth: hci1: command 0x0409 tx timeout [ 2217.764079] Bluetooth: hci1: command 0x041b tx timeout [ 2219.812048] Bluetooth: hci1: command 0x040f tx timeout [ 2221.088373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2221.090397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2221.093741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2221.153577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2221.155270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2221.159727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:30:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:30:03 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:30:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:30:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x8804}, 0x20000001) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x7fff) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0, {0x0, r3}}, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_open(0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 15:30:03 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x302, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:30:03 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:30:03 executing program 3: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = open_tree(r2, &(0x7f0000000080)='./file0\x00', 0x88002) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r3, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r4, &(0x7f0000000480)="af", 0x1, 0x1000000) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:30:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) [ 2238.001635] perf: interrupt took too long (6369 > 6333), lowering kernel.perf_event_max_sample_rate to 31000 15:30:03 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:30:03 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000001ffffffffffffed00"/24], 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mounts\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018040000c01dc6d72ab45b1ee50b25a2573e6b836affc9a7f6d62addb85b21687d0c89a71e7a186c3fbc7204b693a8ec18a7ea0cd2480c45ae2129e943a2dc0800000047b6eed47f694da493e638146710a9935af95e7a7bb8b95c49a9878ba69534e8e021e6d7b72d265e243db9764c944c2103cf94175c9e7dbe95f968efc5f6f67d975bca270300279050d5fb405fb88c9e6e29f5ec8e", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) r3 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000080)={0xed0, 0x0, 0x1, 'queue0\x00', 0x410}) 15:30:03 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x302, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:30:03 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) [ 2238.201393] perf: interrupt took too long (7985 > 7961), lowering kernel.perf_event_max_sample_rate to 25000 15:30:04 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:30:04 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:30:04 executing program 3: fstat(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0xffffffff, 0x3, 0x6, 0xffffffff, 0x80, "df1ea30cd284a8fa5e285b2bf59f782c9c59f1", 0x9, 0x5}) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1, 0xe6}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}, 0x7fff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x2e, &(0x7f0000000240)=[r1, 0xffffffffffffffff, r0], 0x3, 0x0, 0x1, {0x0, r2}}, 0xf64) r3 = syz_io_uring_setup(0x3ef2, &(0x7f0000001080)={0x0, 0x0, 0x1, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) io_uring_enter(r3, 0xff1, 0xb751, 0x1, &(0x7f0000000080)={[0x2]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = timerfd_create(0x0, 0x800) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0x8, 0x0, 0x0, {0x0, r2, r8}}, 0x4) 15:30:04 executing program 5: perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000003c0)={0x1, &(0x7f0000000100)=[{}]}) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) dup3(r1, r0, 0x80000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7, 0x29, @loopback, @mcast1, 0x7800, 0x7800, 0x8, 0x3}}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) syz_io_uring_setup(0x7a94, &(0x7f00000002c0)={0x0, 0x3767, 0x4, 0x1, 0x100011b8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x8}, 0x4) close(r6) sendfile(r2, r6, &(0x7f0000000080)=0x3, 0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x7fff) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000180)='./file0\x00', 0x10, 0x240000, 0x12345, {0x0, r7}}, 0x1) [ 2243.236103] Bluetooth: hci1: command 0x0409 tx timeout [ 2245.284061] Bluetooth: hci1: command 0x041b tx timeout [ 2247.333071] Bluetooth: hci1: command 0x040f tx timeout [ 2248.661658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2248.663680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2248.668574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2248.708664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2248.710555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2248.713587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2249.380166] Bluetooth: hci1: command 0x0419 tx timeout [ 2260.262392] Bluetooth: hci0: command 0x0406 tx timeout 15:30:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f8e630138402f0637"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:30:29 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x382, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:30:29 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:30:29 executing program 5: add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc4}, &(0x7f00000008c0)={0x0, "65a6cf5b9c07642a3340db90bee4874c94ec4fdd53be77d8d05520d91682233c045247ee072dddb4606017c18511ee7cc2005a83f5d5bbc07333a25fce3d1db4", 0x20000}, 0x48, 0xfffffffffffffffb) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f0000001600)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000000c0)="ffd446513f88ac2434e7ac5115ea3b4193e0c7be8710b15b8c8f44b7012245aadd4701eb37d24da04d86b52f13c8750d539d6eb341a1575e9ea17c6cd787a1ac0681665727d7e780aabb1be07517ba347100a7bafeac620fdebebd4033e356c3523514534c3f2292cf626a6c18d0ab47d5da259ec6bef9e9829f10c2c05034029ccefa5cc336066015f073d5ba140a72a1000ca39db4c97b1dd08c80e38fc544123ed57b5e5f365289149af95130cf03ca0504b1d7608b08a22efe45b0c5541d9bd345d2ecfa1f5d37c80a84306d2f51e84282", 0xd3}, {&(0x7f0000000200)='*f', 0x2}, {&(0x7f0000000240)="d2edaa2737222f7976decc4132c2584d23c97704710cfba640dc8c4fff2f8e3214efc4941af921c05d2485ba133d33fd446199763da835895f82b837820ca7", 0x3f}], 0x3, &(0x7f00000002c0)=[@dstopts={{0x48, 0x29, 0x37, {0x88, 0x5, '\x00', [@hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x200}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra, @enc_lim, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}]}}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="e9a59f1ad0d1cbc8fd4a2887348e0f701ec0da795e0ac3bd1fc0a9c6a9e5e2448ec8e627cb90703a3e36493b57c77b5a157be8587dfdcdaa63750137de71037e531fefb64a1ae123d8e0d21dab14172c1d4edd0a13c8888674eda2d46b5aa6e0971bc5051a025b71cecf1c6f1ded24a4cd770d2b198e8965ec4e", 0x7a}, {&(0x7f00000003c0)="30c3d3bfe5c5c641140186427f34552e12cf23db142d24408b331badf05bd79740047d745393e0b39681217665182f82335da9ce0a340a76bddfc35c6583a3978315accb2ec4f8ee59b9b99d747813a0659a05efc538bca0e4e124a48e2a183341e010d3b35b1334da1c30e35b16ba52c42c5f15dea04cf2ff21aafb3e5ec064d6ba8995102749437cb1f13e4e1bbc762785f7057c1de53f7c159fc8d2907ac6bd3b33a5056c2b8f494505500087684eb9963dd01e0c9d29edd51a17853735732a151ba79b31186b4673dbfd00e4b57880c9621df59b5b8dd2bc8d2a5a472a", 0xdf}, {&(0x7f0000000500)="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", 0xfb}, {&(0x7f0000000600)="3bfab207bd106b2d599bb9d852e27cb853f31a58b052c8c843e9a27da13c3d42b45c4b7ea47da496a93796550d403a3737b725325b895f7711939d453dfe5351d71d7dcb441540a368b522e4f52d24a53191367e16d69bcb67db0b935f8168591b2ba19b614afa161fb42a9551245882b2863726410ebebce50d7932d06f49653ecbce0415c06e1eaa3aef5689c7e85dcfbe600d6adc11482029c12368bea8db2cb4e099afdfa6c4820178b96b4357bff6c8d4695578a2", 0xb7}, {&(0x7f00000006c0)="60f73a9b7b23b29df2e77e1c3295f1c0ae406473afde7a01d15f6df51b4728fe97e172168f31dc8fc7719c6189", 0x2d}], 0x5, &(0x7f0000000780)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x4}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}], 0x48}}, {{&(0x7f0000000800)={0xa, 0x4e20, 0xffffff81, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000940)="a350e843f8638c68cca839f387981fc5dce1110e493aa205098af7d9f22d6a8b42a6926cc4", 0x25}, {&(0x7f0000000980)="43b3644c525fc06374f5a6ebec919e2af276d31b3a3a7367a0a2125ff6e07c2b1f72a7a1c9680fe8d456c74e24d38027bd538016d1e9f6756683f76e3e782e79c1dfb5926afa6808bb52a8f6b54940a6af43e78feb202efa9d480167ad5d00cf1ae04e7600f82c946dbb66dfc6e66f206832f3e5ab4f2579c3a4e82048352df4ffd13a29a6fbb80e83d44a0e", 0x8c}, {&(0x7f0000000a40)="616f167332d0ecec1488c5e642c8151ff9af734a63733e892f2ae2295b5b0b7ef20c3dc59d23abc663c96268fc87b090e9374519f852049cd48a37f56f99c9326ca57718c118be89fe2dcf918a410380e5aeccce5dd66839a988ea29da964061e858c9282eb1c8e674e5f40faac6dd2b4b33d10f10a3180202f7270dd2b56b6bdf51e82e34f71dad0661371c877305c1fa7daab1cecd42f883d2cefcad19ce325ea7d8c69abb221862b19c9ab0f0a274bc65ff08dc614f8e7419fd2d2f0593866eb4", 0xc2}, {&(0x7f0000000b40)="b89d56f16833633c94fb863ef9011b040cb765433b40b0b78a92532ef4c011dfac7f0e0230382241ea5946f089c24e1e8647b07074d9c49d4ade87524c8284c060cd3cc7cc3fb957880b8c32aad5543e01d501ad83a76f21321f9ee6e20c4309c380a966417302531d7e743c9a", 0x6d}, {&(0x7f0000000bc0)="7dbd5aa60a8ee56974401bd340f73be2cdbb5a15760c2d23cf9103cde8c829b6b4003ca530c2c152398168f4958d46cf2f35d52fc5cf13277278b277778aa6b8f6226447fde0286d27da88d84626c4f23e4bde238e622e1f0d3d704607ec483299b20e448fdbac34a74a39adcdf9e7e4cefd679cd3ba11f411a5", 0x7a}, {&(0x7f0000000c40)="e0cb4e33dbe8f5", 0x7}, {&(0x7f0000000c80)="e3ea93a87e475cd9fb0acbdbd01aac69f17f2120c921194569cc7801cae60e1e50cd322579b4cd1c553f7f1e06e64ea0a79707bd73a09b61db47bb67e258f78647146a8103440ad81f087cbc17f36b480315795748310214eebbc8d5f81975356fa0c8b23c759264405f2fd09ff5840f1d7f32eeb9c730824301ef151621a752c93a8c9edc6f8ecd15c9a2361d4bf2ae2e9fa2341ba47b21e1de85cadee9c01b06df92f273e45cfbfaa3", 0xaa}], 0x7, &(0x7f0000000dc0)=[@rthdrdstopts={{0x160, 0x29, 0x37, {0x2, 0x28, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}}, @generic={0x2, 0xc9, "64bc862eaa66dcaf1db8c3bf1d601e16f7da20685b83d1c8e840a915bd1fae61f122b03c142066ed382830e8799c56be4c08a6f087fc95a735728e90c9300e7d161950cee9536d71c016dfdb4f566d7c130cced2f8287e1e5cea0071b1504d3c86797e6202039692558e2da323669bea973803f1d4e2fbb975ca65654b66361dfe601e197ff3a877e98927e7034de7396f96f0d614219b4d979be70b41486fcd8b11ba3e2b7db1c96a2707ab3e919671f7c4730be0a63b99afd260e279d8102fc20ff2454f43e83c22"}, @generic={0x3, 0x53, "5d7a13abf70f8ff80c26f4809d293b81ae1b4c961da317a3116cc49d48389bfcd0a54e976cda3838a9053f5d24aae9b43ab81ea673134248eca72c05a71fb7a486be6390bc8fd051ef388b04b75843ecd252ef"}, @hao={0xc9, 0x10, @loopback}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x2f, 0xb, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x48, {0x3, 0x10, 0xff, 0x9, [0x101, 0x7, 0x1, 0xc80, 0x80000001, 0x8, 0x3, 0xffff]}}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x87, 0x8, 0x0, 0x8, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, @private1, @mcast1]}}}, @rthdrdstopts={{0xb0, 0x29, 0x37, {0x5c, 0x12, '\x00', [@hao={0xc9, 0x10, @local}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0x7ff, [0x7f, 0x8000, 0x8]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x3, 0x12, 0x1, 0x2, [0x5, 0x100000000, 0x3, 0x7f, 0x7, 0x7c8, 0x1, 0x100000000, 0x100000001]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0xbbf}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @flowinfo={{0x14}}, @rthdrdstopts={{0xe0, 0x29, 0x37, {0x2b, 0x19, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0xb2}, @ra={0x5, 0x2, 0xff00}, @generic={0x5, 0x79, "7a3e5a22485aea0858f88ba79f4441394dc126aa0bb48ac0dd4d0f090c87202b4086e85a8be006ef30cc05e3ee270c5b74089fd2d22ea49c70660c77b597f3ca97738eef5bd3428c0c80ed3c939e5495cb8449b43fb5499b97a9eb6e57c5b0595cfdd31c6033019c6f046f29165971c339b5c4efdea4e2dc23"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2f}}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x66, 0x9, [0x7, 0x40]}}]}}}], 0x438}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000001200)="098a75b69932175a5a107f14e3837d12fc85b6ba33dd29e6dffba66ae542de9eefa975fc2ec9036354feb49ca907a5357598fcac6e1274e4a802dd5be900384488", 0x41}, {&(0x7f0000001280)="a8d382eac2", 0x5}, {&(0x7f00000012c0)="19edfce6dd618d274283cd36acfec597349bfb67589a228eab570d0250f713f092297f53de45efd77cbdf49f2e19e513ab03af5e775f38c25ea15f7033f0b36959cf39e3fc95e1ed38911f51cd2635b04a2aa23d37fbe99e844538bc8c8e36bcf0cdb6de1365ce367831e2fc2717d531ce461a62aeca07ed6a9f1c3f03808a67f7fec3ec71f8024df2a76f3dad64b308bcb1fcd7ed4b88ef7a642ebe94414bcd377bff716d63efd16bbcc03f3acd7585d51d4b6e826842d56ce7fbee8b2b742b0a629571a83ddc245d50c9a3c3d1c75df4ac04a62e8411c21acc0a5fc0c3", 0xde}], 0x4}}, {{&(0x7f0000001400)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001440)="3203796b38629409b866e7ec3292d2532022eb0324ccdf0a99d3ce54b42a665c0d0e041528e485774993d7a38d2a016b8600a31480e9d8cb1345515815216fc78b29f4cd6e1b9b3afb25fe87592ac3e9f12fa4fb5a3b5c0f8dfd3b303f1045cd6d2b4394cba60598593ead42306929251575ae6ed309f412438acb51e460c3d9a43cced3ab8a2ba4a883bd8059483635735fe893d4187b6cd1e06f0831603caaa488513ae0f96465ed56321f1630d9fdbe4c588e4707a26015c630fc202ab42e3f84588ba2412db93c2ee22b293072429f37a925661f15501a5db4ca5fd366bc1255eb88", 0xe4}], 0x1, &(0x7f0000001580)=[@flowinfo={{0x14, 0x29, 0xb, 0x4c}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10001}}], 0x58}}], 0x5, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, @msf={0x49, 0xcb, 0x80}}) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:30:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:30:29 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:30:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:30:29 executing program 3: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) gettid() getpgrp(0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = accept(r0, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f00000000c0)=0x80) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002000210a00e60c0000000000020000000c00008008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x20}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x26600, 0x11) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x928a, 0x10000, 0xc39, 0xa6219d3}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="60010000100001000000000000000000ff020000000000000000000000000001fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000e00000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040000000976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"], 0x160}}, 0x0) sendfile(r5, r4, &(0x7f0000000140)=0x7, 0x0) r6 = eventfd(0xfff) fcntl$dupfd(r4, 0x406, r6) ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0) [ 2263.719724] perf: interrupt took too long (10034 > 9981), lowering kernel.perf_event_max_sample_rate to 19000 [ 2263.748023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2263.818801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 15:30:29 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(0xffffffffffffffff, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:30:29 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x302, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:30:29 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:30:29 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x382, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) [ 2268.900129] Bluetooth: hci1: command 0x0409 tx timeout [ 2270.948101] Bluetooth: hci1: command 0x041b tx timeout [ 2272.996065] Bluetooth: hci1: command 0x040f tx timeout [ 2274.211509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.213681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2274.216642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2274.243928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.246013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2274.248928] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:30:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="117f7b898efd9a727e"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:30:54 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:30:54 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x382, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:30:54 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0x80000000ffffffff, 0x8bb) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000000)=@default_ibss_ssid, 0x6, 0x0) set_mempolicy(0x4003, &(0x7f0000000080)=0xfffffffffffffffd, 0x1f) getpgid(0xffffffffffffffff) r0 = fork() tkill(r0, 0x0) r1 = fork() tkill(0xffffffffffffffff, 0x1d) fork() r2 = getpid() r3 = fork() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000440)=0x0) fork() tkill(r4, 0x31) r5 = fork() tkill(0x0, 0x14) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x384b3c23, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000003c0)={0x10a0900, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0xa}, &(0x7f0000000240)=""/79, 0x4f, &(0x7f0000000340)=""/55, &(0x7f0000000300)=[r7, r0, r1, r2, r3, r5, 0x0, r3], 0x8}, 0x58) finit_module(r6, &(0x7f0000000100)='wlan0\x00', 0x1) 15:30:54 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(0xffffffffffffffff, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:30:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x105142, 0x0) syz_mount_image$nfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x8, 0x4, &(0x7f0000000600)=[{&(0x7f0000000300)="261deda54cd9d0783068021dff6685f8dcb7801cb8d4a8f3496197f69f6e6c56dacc8ef8548ccc4e034407795cefe78037974f4868db70d5c24aaa0266f586aae9ee710f8fa098bc228aec30d9382bff7e3b0ebe2d86588e6ca10209834a92056e2d774f4cc1c3a2a05237499fc783b0ebba56fc965b9e517a0aa34adae8873425c2b4ffc8504a4bb228cd4923c01744b059a441215c636fa97d25f851c7c18b7c7bb38ea5f61f83df3e2c9662f7eaf0", 0xb0, 0x1}, {&(0x7f00000003c0)="c3afb9e92fc9e2f3352bec95e2ad09e8f56fbe3f170fe24534235d24a9dafaf91ff51b28e56a2a5f097a140fee5b4748262b85aebd74d598864e4e8cdbd52a21476c16323b8be68822f5a6f92648a9d8a3b54eb0d15e88fb34999f26efe25540400053f4055a9616e9ba230d57d2c619373c20f419dfb442daa767e0eb709de78dce0237a674fb75af822171", 0x8c, 0x1}, {&(0x7f0000000480)="019de0c82a2e4b3efeb5f51c014a6bf2c7dbd5996cd057704986559af45fff7349a4f61067fcfa36af9b5a6f42314cbd9aa2ed5f83655174b37eaef09afd0f5d88a4ae33dc57fe896ff1b8f220cc36a3ca736bff821a0ade239fc8cc4933e553fa3be8565d598d85305f612d936c163519ed078ec8d6f06d0e8ed42321de0c63b2f6a0d7bcb0d8cabde9a975d040b92083300d9777414fb29769871670364a6bc014429697ffacda2d8abe9c5818aaba9970553abd400455201bef269cec91f1c356dea6c6a6c602787dcf430800fee1434f", 0xd2, 0x3ff}, {&(0x7f0000000580)="b44f3982bb0e905e1c72983fbddba2c6149950da3a816c3ceab06e69d0ea00b60544034e30b4038c3926061dd4ed0cff8d40578e91e0e87be878514b38e34b8ec59432b36e10c6425a924888d78d015afd8d3e", 0x53, 0x4}], 0xc0, &(0x7f0000000680)={[{'\x00'}, {'\x00'}, {')'}, {'Y:'}, {'{,-)&'}, {'\x00'}, {'%[(!\\'}, {'#^^'}], [{@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x66, 0x38, 0x63, 0x34, 0x37, 0x35, 0x34], 0x2d, [0x36, 0x34, 0x66, 0x39], 0x2d, [0x61, 0x30, 0x63, 0x34], 0x2d, [0x37, 0x33, 0x38, 0x30], 0x2d, [0x35, 0x61, 0x63, 0x61, 0x35, 0x31, 0x63, 0x61]}}}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000002100)=""/4090, 0xffa, 0x8) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xfe, 0xff, 0x4, 0x6, 0x0, 0x3, 0x4000, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xa8e8, 0x4, @perf_bp={&(0x7f0000000180), 0xf}, 0x40004, 0x0, 0x101, 0x0, 0xd939, 0x7, 0x3, 0x0, 0x10000000, 0x0, 0x8}, 0x0, 0xe, r2, 0x2) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x3ff) sendfile(r3, r4, 0x0, 0x100000001) 15:30:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:30:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:30:54 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:30:54 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(0xffffffffffffffff, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:30:54 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3c2, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:30:54 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:30:54 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3c2, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:30:54 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:30:54 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:30:54 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) [ 2293.604116] Bluetooth: hci1: command 0x0409 tx timeout [ 2295.652099] Bluetooth: hci1: command 0x041b tx timeout [ 2297.700187] Bluetooth: hci1: command 0x040f tx timeout [ 2298.843492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2298.845410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2298.849152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2298.868819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2298.870652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2298.873844] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:31:19 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd4, r2, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80c4}, 0x8000) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc02, 0x0) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x1d, 0x6}) 15:31:19 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') name_to_handle_at(r0, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)=@xfs_parent={0x1c, 0x82, {0x5, 0x0, 0x8000, 0x8001}}, &(0x7f00000003c0), 0x1000) openat(r0, &(0x7f0000000300)='./file0/../file0\x00', 0x10000, 0xcc) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000280)={[{@subsystem='rdma'}, {@xattr}, {@cpuset_v2_mode}], [{@fsname}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@dont_measure}]}) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="0300000041881889ee"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:31:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3c2, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:31:19 executing program 3: syz_open_dev$vcsu(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x40250, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) getdents64(r1, &(0x7f0000001d00)=""/4085, 0xff5) getdents(r1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000780), 0x60c401, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000880)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @empty}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000007c0)='sit0\x00', 0x0, 0x7fffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x2, 0xa, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='sit0\x00'}) syz_open_dev$vcsn(&(0x7f0000000140), 0x89, 0x2a00) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv2(r7, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000000300)=""/108, 0x6c}, {&(0x7f0000000280)=""/9, 0x9}, {&(0x7f0000000380)=""/139, 0x8b}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f00000004c0)=""/141, 0x8d}, {&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000000680)=""/63, 0x3f}], 0x9, 0x3, 0x2, 0x5) 15:31:19 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:31:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:31:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:31:19 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:31:20 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10000) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x0, &(0x7f0000000140)) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x2, 0x3, 0x7, 0x80000001, r1}) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 15:31:20 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:31:20 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:31:20 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3e2, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:31:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netlink\x00') readv(r0, &(0x7f0000001b00)=[{&(0x7f0000001340)=""/2, 0x2}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x2) 15:31:20 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:31:20 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:31:20 executing program 3: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x4d, 0xa, 0x1b, 0x5, "22e4425ff4274096765beeb3089ad9ca7e261558f4f77e59eb7dbe99f2a7e42607b15219c62f99c00c4020ba815bc9f5ac59cae20a65c91175cf84698818d24a", "b2a2eb34827a6ac45bad9cac5040a5640d7a1af1e3af1b809ba54107eab6c143", [0xbe4, 0x1f]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x800, 0x0, 0x8, 0x15, "a2b6c76add2c8efe65e1b86dd273135e97d2dd65165053a69f9a7b7338245e58681b38b928b6169b1fed02aff4fe23287ee9d541a2b969a0c1f3b76d9144532e", "d011e9f57477979329103388c7a407ceca0b47ac76164e80abafa8e9b4207602", [0xc0c, 0x400000000]}) r2 = fsmount(r0, 0x1, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x400, 0x0, 0x1, 0x0, "f75df6e8201223f457634107e090eb5506628d8e8ca79dce9d8427310f9eb054ee0fb55e7b4c13f3b0fbca14061e495f7ffe9a0b4bfe1de855f62142eae1fe49", "bec582934299ee352ab7e71a84a69cc6453f1e997d5c7e54d15a74669f8a11fa", [0x81, 0x5d]}) r3 = fsmount(r0, 0x0, 0x4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xffffffff, 0x9, 0x18, 0x1, "ce1ccef09fb6a3ac15ab2976ce36b6b8e9c9c8f10494f529355b4fd6f10237d66128e414b64eb0c22dcb4bb68511cd6c6d2f09fc2e37577fb4c1dab8b01ca232", "a1865d1dba35ea4c5bcc61999d16bdd498f6fbc35e7fbc0a28fc32af6051501e", [0x7c36e59c, 0x4]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000003c0)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x4, 0x10, "58dff11bb8706226ae975b188b1fd86ab1bf16ee44abe153e43fc0349506fdcab1c07fbee45bcd2692d048bfa9e2f42af82aa51200d97319a403ddfb9585ec5f", "c726b4ed3344bf4851a64c00a2d8a6b892f692136e9bea2f1db7d35b4d51dacb", [0xf1, 0x4a]}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @loopback}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000004c0)={0x0, {}, 0x0, {}, 0xfffffe01, 0x4, 0x13, 0x10, "36015b90cd2a65dd492a3845028c1c12f1a726f8e4792e211ee3c32b666816d2b8736bf6479d80aff5f61add5a8e0a4b3045e2303946f3e14596a4576c8f0d00", "b28bea0d4ce72c183fdca576f5de1782ac95a2fa915fac5901525eedbb675217", [0x0, 0x9541]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xdaf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x20044004) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat(r4, &(0x7f0000000700)='./file0\x00', 0xc0100, 0x80) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000740)={0x3ff, {{0x2, 0x4e22, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000008c0)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1a, 0x1, "7736ba6f8dc81b376a0073ace2842a69966647fa52b5da09d6457293f5c9de8e45b8afc41d0b0239750e892ed78adfce7e507f98a2cc26ca5d7b38b8c4131318", "b6ec662cdd3b0e9cf2247a857643cacc56e63bfaf68f25a2f47b040ddae56714", [0x80000000, 0x2]}) 15:31:20 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1d, &(0x7f00000001c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xb8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8, 0x6, 0x9, 0xe7, 0x0, 0x5, 0x40260, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x3d, 0x6}, 0x0, 0x811f, 0x8, 0x3, 0x200, 0x80000000, 0x59, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x9) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000240)={{0x3, 0x400000}, 0x100, './file0\x00'}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) [ 2319.268204] Bluetooth: hci1: command 0x0409 tx timeout [ 2321.317427] Bluetooth: hci1: command 0x041b tx timeout [ 2323.364065] Bluetooth: hci1: command 0x040f tx timeout [ 2324.863704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2324.865527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2324.868561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2324.927275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2324.928963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2324.931817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2325.085416] cgroup: Unknown subsys name 'rdma' [ 2325.091105] cgroup: Unknown subsys name 'rdma' [ 2325.464017] Bluetooth: hci1: command 0x0419 tx timeout 15:31:45 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3e2, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:31:45 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:31:45 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x5c, &(0x7f0000000180)=[{0x7fff, 0x80, 0x0, 0x1e8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) r5 = fcntl$dupfd(r1, 0x406, r4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r5, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000000) r7 = fsmount(r5, 0x1, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f0000000340)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/160, 0xa0}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/53, 0x35}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000600)=""/13, 0xd}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000000840)=""/187, 0xbb}], 0xa, &(0x7f00000009c0)=""/13, 0xd}, 0x6b7c}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a00)=""/181, 0xb5}, {&(0x7f0000000ac0)=""/177, 0xb1}, {&(0x7f0000000b80)=""/201, 0xc9}, {&(0x7f0000000c80)=""/218, 0xda}], 0x4, &(0x7f0000000dc0)=""/232, 0xe8}, 0xffffffff}, {{&(0x7f0000000ec0)=@hci, 0x80, &(0x7f0000002200)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/139, 0x8b}, {&(0x7f0000002000)=""/4, 0x4}, {&(0x7f0000002040)=""/205, 0xcd}, {&(0x7f0000002140)=""/148, 0x94}], 0x5, &(0x7f0000002280)=""/4096, 0x1000}, 0x20}, {{&(0x7f0000003280)=@phonet, 0x80, &(0x7f0000003500)=[{&(0x7f0000003300)=""/110, 0x6e}, {&(0x7f0000003380)=""/56, 0x38}, {&(0x7f00000033c0)=""/16, 0x10}, {&(0x7f0000003400)=""/24, 0x18}, {&(0x7f0000003440)=""/183, 0xb7}], 0x5, &(0x7f0000003580)=""/214, 0xd6}, 0x7}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003680)=""/167, 0xa7}], 0x1, &(0x7f0000003780)=""/54, 0x36}, 0x3}], 0x5, 0x2001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) mq_timedreceive(r8, &(0x7f0000000240)=""/31, 0x1f, 0xffffffff, 0x0) 15:31:45 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:31:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:31:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:31:45 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40000, 0x81}, 0x18) mount$cgroup(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) syz_io_uring_setup(0x22, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x119b28) signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0x200]}, 0x8, 0xc0800) r4 = syz_io_uring_setup(0x22, &(0x7f0000000680)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000540)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x80000, 0x13) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x800000, &(0x7f0000000300)='cgroup\x00') sendfile(r6, r7, 0x0, 0x100000001) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x400) 15:31:45 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000000940)='./file0/../file0\x00') mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000780)=0xe8) stat(&(0x7f0000000900)='.\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x7, 0x7, &(0x7f0000000580)=[{&(0x7f0000000280)="f684", 0x2, 0x7}, {&(0x7f00000002c0)="1c21e7aff246e6c5389ae4f75dce1ed4338f5adbb30a9bbff0078d8cc170", 0x1e, 0x86c}, {&(0x7f0000000300)="e429d97a9e5ecc2620780036d9bf023222edb31972216b3b1753f41a87f0496b50a37d955748a0c04897128943371ca5a7d2a98f39d0ecf85c1b43390557d337d8b7132670cb746a1a336390a7ff0903cb", 0x51, 0x7}, {&(0x7f0000000380)="50da298e55293ac7ebc67bd8dc913038f235570310002454a62cf9232a27627ebdd4a0efa2c7750f9652a2964f6a8ce354172680b142b94821f2465ea8cca0ef125a21f5c1939f8cecbefcecb452f6308632b1c2fa30da83ccd764e6d53380c784b3a80badaa318c69c8736186db74f896384aa024393c0049ebf47aab0ddc415f6576d40cd7764d7c91d73dab24955d6e2c9c7458113fc8487f17a27db09dd7c6d1938dd0b9813339e07fe701a9a52e02ed1600ed0215d2111c87ebba7d7230f78cda4d4cc6b3804348bd5141e93bc2544f81263ab1f407caa35ed7d5a3c6eefe83981265e37bd31a39bad4", 0xec, 0x98}, {&(0x7f0000000480)="3404c3ed67a0f4354103c964a6117d008cc5d072433f9c967d200ff21b63411844619905ec29e9ca982e6eb7701f000748a50f311db5579a75d747789a5010f990a787e3aaf1c6f9c0fa8f95108ed0253ab46edda0e91509fc00313569bcc2590049a2688c4facb4093f656392c690a03c86ca4ad597", 0x76, 0xf5}, {&(0x7f0000000500)="9e90adb6144b032de6a92e794661c4ee762e3ab830933ce87be764", 0x1b, 0xec}, {&(0x7f0000000540), 0x0, 0x5767}], 0xb77d316872798ecf, &(0x7f00000007c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x25, 0x74, 0x33, 0x21, 0x78]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x34, 0x78, 0x31]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34, 0x4d, 0x65]}}], [{@smackfsroot={'smackfsroot', 0x3d, '*&/*'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}, {@fowner_lt={'fowner<', r1}}, {@euid_lt={'euid<', r2}}]}) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x10c83, 0x21) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f64657641736701c2e27090595e00"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:31:46 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3e2, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:31:46 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:31:46 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:31:46 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3f2, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:31:46 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:31:46 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:31:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="b2b75bfbb618d69966241c000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c030000", @ANYRES16=r2, @ANYBLOB="000129bd7000fbdbdf257a00060008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x38c}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r1, 0x4, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x45}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) flock(r0, 0xb) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r4) 15:31:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\b']) [ 2340.727728] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 15:31:46 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) [ 2345.380183] Bluetooth: hci1: command 0x0409 tx timeout [ 2347.428091] Bluetooth: hci1: command 0x041b tx timeout [ 2349.476088] Bluetooth: hci1: command 0x040f tx timeout [ 2350.857813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2350.859586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2350.862882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2350.913904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2350.915636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2350.918336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2351.525051] Bluetooth: hci1: command 0x0419 tx timeout 15:32:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="9f5ad46052583d0000"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') mkdirat(r0, &(0x7f0000000040)='./file0/../file0\x00', 0x11b) 15:32:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:32:10 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:32:10 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3f2, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:32:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030302c003cb6159b4973292eb243d1cc311ac5f2dec87bf0eb5e77f077eeb951a2fc7ed522"]) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) r3 = signalfd4(r2, &(0x7f0000000080)={[0x10000]}, 0x8, 0x400) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000000) openat(r2, &(0x7f0000000040)='./file0\x00', 0xa00480, 0x3) 15:32:10 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:32:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:32:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:32:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2f64657641736701e560d571a1c42cde8ff53900"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') open(&(0x7f0000000040)='./file0/../file0\x00', 0x4802, 0x51) 15:32:10 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3f2, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:32:10 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}, {&(0x7f0000000280)="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", 0xffe, 0x393}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f00000012c0)='./file0\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x12, 0x17, 0x138, &(0x7f0000000040)}) r2 = syz_open_dev$vcsu(&(0x7f0000001280), 0x5, 0x20000) openat(r0, &(0x7f0000001300)='./file1\x00', 0x200400, 0x2) ioctl$KDENABIO(r1, 0x4b36) symlinkat(&(0x7f0000000180)='./file0\x00', r2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x10, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0, 0x6, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40, 0xc9) 15:32:11 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fa, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:32:11 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:32:11 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:32:11 executing program 2: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000280)={0x0, 0x0, 0x2c}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) r3 = perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x3, 0xe9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x1, 0x4, 0x8000, 0x4, 0x4, 0x7ff, 0x3190, 0x0, 0x20, 0x0, 0x6}, r0, 0x3, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') r4 = getegid() setresgid(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3, {r1, r2}}, './file0/../file0\x00'}) mount$9p_unix(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x2000, &(0x7f0000000b80)=ANY=[@ANYBLOB='trans=unix,cache=fscache,version=9p2000,dfltgid=', @ANYRESHEX=r4, @ANYBLOB=',access=client,access=', @ANYRESDEC=r1, @ANYBLOB="2c76e0562e892c6163636573733d", @ANYRESDEC=r5, @ANYBLOB=',cache=fscache,hash,dont_appraise,\x00']) acct(&(0x7f0000000740)='./file0/../file0\x00') mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0xe, &(0x7f00000009c0)={'trans=unix,', {[{@access_any}, {@loose}], [{@smackfsdef={'smackfsdef', 0x3d, ').}/^%P%}&#*},-'}}, {@subj_role={'subj_role', 0x3d, 'reiserfs\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@dont_hash}, {@context={'context', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_hash}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@audit}]}}) mount(&(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') 15:32:26 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) open(0x0, 0x20000, 0x20) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) fcntl$getflags(r0, 0x40a) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0x7) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) ioctl$CDROM_SELECT_DISK(r1, 0x5322, 0x10000) 15:32:26 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x8020}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:32:26 executing program 5: pipe2(0x0, 0x0) pipe2(0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000001340)=""/91, 0x5b) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)=ANY=[@ANYBLOB="481200001000010000000000000000000000000005000000120000002b124680024139384e9b3e77be6f30aa83acee5be2a47a75ef002d4296f04f08e3e57bc8e35f52bda75bc8fc1b5bc8fc62772c61da0bce7269f6b2e8e744b0460300f2ff9e18d420c0d9b8eb97ee7acc0a771e503ca72fe7cc8e85abb3ea278571cb6b2d6c06c084cd0cbd3d3efa116d0f10a36cb113565c54f925a5780c0de7eb1bd8d03f2b985c19672bac5851ec50dbc45f6c818082331d8ad63c5a2972b674c9e042c31c4ce015c2bd14d3a6e61f5206a001a887a0e16d0d38b0372176a64cab6f77f2b3fddd0410c08b793a1c0896463d2982ba9dde8dc20f0c842eb82a9f8fc0ec77e37bf0e73f7c461f1a638ec25ec72b2aa0de58a1225fdd4b7cd63e4ce054df41d01d06107c1695a500615b7a87bdff2c4ff2aabb3528eecdde2d805c423b626091b68cebdd463036cb47d7979207c0249f81ef7f32d5cbd0c461ae1ad2323a86e82251c8b019d98cb9ea8f2a15f64d69c5c02616592ee19d94c0f392d08b3f02cbef691069d1bf1460f8e3a2adbdcafcc5fcffa239b741967ad7821bcdc178c942d9ec68858025eadeb95c1d0a7b436403da759e04b79252fc99808c830a7b000400ee13ffeea086e5c910cdc9f98971e53b2e0585b76ea7b2f8ae52177f87124822d7689ca8902f2d2ed8b3c73cf15116307ddca830bda251c8365ed31de015afe2c799e47fefbd7428acc43ddcb3b3972791731b801970a51b9c823128dd6e51cfc3061d5131a9335cec4de35b13781ce73e02838aea8ef5000a007b00212c21255e000000919b03c6e599a57f81a077f41934e53fab74b00f4b0ffbe8b7dcd1e5bfbc0a9d12ce8e3aa71eca211e8faecb4e0ccf8fc4d7c736ce1e1dd92260470aff8c7c4cbf6928bff953dd365b53df396873f07200d8cb62e55aa6cd0822ea076d96cb97ca3ed02521d99e624e29fdcba465718213430b48db741e3600c0b2953dcf9c74aa8e523678c986044b852947fb43068768a16e6d31ab3dc31e2c6cdba1d890d6ae6eb0a9979ad2a16851578fe0250296e246012f6559960a46c4f366f81310e7b7500d2267263ae6d89d6b8a5a6a7dd30272e171f4c5855c4e0d9588ccf517b186c8054a5310eb1886030caab803d7d5b052fc88a7fa216dc3dc3d7661d9775f363cc19fd587f11829975c3685e8c4978e4ec8a948daba670683e2b02d67cf23b669e3e0b9cebce9439a804c5bafbc38dfa9bedd428a0445ea02ef0189f567988bdf328f323196631f9bf1d6a917609d0d99211457e8ceaa41d2722f7610a3d73f8e5d7615cf822c3fd38e187373564f64d7fc0d641ceb0b725fcd6a7db8bbced60d69b1c0278105221b9883d46868f98d12baff8ec9b5d7df0fe596c97cc6fbcb9ca8f10a1f26473b0d3f6cca425e769fbf3b7aa2200cb7dd9656dc474eccb48f909819aeec6cdf2d1d2c900f88423d158f04d55e58775116557a14bb180dce9b38d1b48ed4da353f16a77a08bcb28cda338c432707c4833f1776282ad1747cf14dd52db08568733c86e35ac89283aabc2389a4fbe9000dff6799e0c07076ba9034c4c8a0ca2fcf2a3b3ff341543468bcb61b1780ca0b0acbb81d5ce821ef17531711d6165bf2d10124adac46379a058726ec0c2e49c515f7f36e7323ce36f138115f07adfc684f4bb8c78b635b4f4e4cef9ea98511b8390810b94dd47e10681df211a32c2e3d0a9b202a1b774c477fa59d4337cfde01a4666a25980f51b52763b5d2b4526cff112abe484d0ab9eec6d396ff8d4cb1ec2f692514ad0295d929b46fe55d5341835be0da62fb42b8d0e0f89bd9738dcc236c9fe0b26a60acfdedcc68c67c9ee45dc2d6409d7557c19f756f0aa50360cc97f961abf14953989360fa8adc23def9a82cd496a7574e2c6856c2f27c3a87478faf3830ecdb6ed9793afbc945f1ca36cfd9ab6bf2f44a3e44792d71a6b98d26277edcc0c30ce85906bb31c2016f286be2920dd862d65fbff7a06a4f9fb9d138c8b6ae3e9a0f86be97d04149c6c2931f61eeac5429f45be765c54001bba8e268636ed22d69f4f3327f06b82fd0577841fbfbd3885c14fd91b7f012dcd0532e3173270c8a21b311dfe5d35fd82d7569654220405740cfaf70eec3c185c9299c201641e49dedbe5eae912d55310d155dcede2c03f73d882058e53e00b17d4a793e4df5baae45dfb4fe86a7ed614c9a9a0fd24687386387d2c8a58a008767544554bc3cd1bcd767f11ebd6a1217fbb0228713d306a117bc8bb10f322036047e44eab085c22b73eea61ae0f8e65a0c2b27f326bdcc65c0fc64b0178fcaff9fa34a4287e52e2580ad0c580cdfb1fe26358d685b6695843bccc99be5e0eebd062876ecef22a984008da8d43be8ee3f7d503e3aac053c929963a1096853f3cbeec1ab942d61564635ea64d2a1f5fa05c95c7212378ea91221ab49279b3cbdd4475022834cc6b4f1e54536eda80a0724b3e7ae2103754cba3768ebace46dfa4ce45bbf2e7a3a13aecb639de66127d4218d7726046f61f9ab28511aaefcde1df3db93261507e63dbc45110631c003301155aa78b748e816e4cabc2cfb7e2c4430991c789bb338b0add073d888ef0940d23bb9c04565e7fa1a09e121dfe5910111a547610fb67cf81a4e195164dac3a2059357c0c84691602526b6a677fbd893c0ce99f84b5fc59d7fcf20a8619ee3f7907c3d88a7055e26cc9ad76faccd7cea570286012561bd1187cd8e655cfce06acbe1e4221f18c3b950db4eb9112afedb6a7a0497cee9e436286d073d1b43641d39bcb9f87a6dd8cc483a8028a94bcf67a0be57829a91144f6d1e0a044fe3ccfebf436fbc05155a9f17c745052e8e135aa7dd842077d7b2b4e6c9bd26827d26b6c00e787b211d278f3da2274a03aba22890c96fdf8a72428f62a01b8499b4b50dee4b53d52111db6f9ad143a3be21d3df016583dcecdf55733798dc9b12cfdd0471a60282bbbcf390f07c80e3c74bb18e0afcd8d9d7864984e8d9678fb30d3ac30e2602153f3cb97436a36f7137a2db751f4f0d960dbd0040a604dbb42d1ee83ae05a69a9ca91e7fe0106a2e84dec9e6a5ee4c29145e3d71afd348bf62d17df94e607250d14f9685e28435940748e1c166e4a26cfd3a5dbee2d3f82699a091159e796a2f8be8bb54af625d2b854aa0e64bcdd06fb80609cfd4df646d83488fdce8dd54cbfde0026988b39e8a5ea2fd18a05e8ba5cab27bfdea0a4701941167c52d8f71cbecc7d13444e4a6bc68fd671f1a482ba0da882736dc42707faecf9a5a7f1ec3c8117191b54b00ee94320d67289553e6dd721e8c5cc54df07304cc928f792e814a4df622b0faaa08388807fc92ae9cd6530fdf5cfa25c541a6645ee20d21b8222dc493880f5ad3af3158c912b2e9ea24c171d267976ba48aaa0323ad3edcacac8c4dff6d3e50a6331d732596219d3fcd2055d034294ce74df2ad8562c71a618a507f72cdef124df556bdbbf18f0392d6934c391f183ad4195bd1b383022aac60aee1564060015e3e6f965739dd127818eed578329341917cd345638a29fe0fa66ad00de8669972565f2a5b17355d013d672219b11ad66199f44a1cb9a9d6cea0ada746fe010baee5d81433ff2e7cddc8feba8b1b33cb25587860af3f4aaad5d7a347a804fbba74450b046bb604566486ed6132b688973ba123926ecd431ccc4fb72ed7b87dc9499e435be5f23d0d517098c7c911712d968c60605a63689396248864e24850d44839e1e11e716b09b8b62ad4f8bc7e295c8be8dca419f1979f1776d29f9961347fdeb68c2051ad4524da6b5a434690b7de6ff43a6105ed4bfd57e8ec1519432114e57a67689e5376d7ef17c8e40b0c7cb8c6f0979168227173b43a9717d0528261cb2cc60f6ae5071b75d18ac16a5ad05f09713184dad7d2b902a597e3e822a3bbb001a20f5a30183a28bab90d8f9849d231b93098545595df520ea6b8afa3af0bf5a14d2bee109e792b9dd7f505e0d4f3c58f88a5498d97d6fd54d775efcaa61840edb311958b087b359fa94177e9cb1ee1c85394389ee1ab2084cd639c4f3c25b5ffd69f877da198720a79aad5a278104b3264c3bb2fbc8f1d6d6098fd6655d442f56dd7797da0bf36ff109c1924a344c7d8b17b78f089cd70d79c66be078f07f0cde633dcaf457e7c99855efc6ebf34f2d3831eafcadbd67f28617d04414ab016e7fc36f3a47a125067c8491f3f0862bb49d95965c01b9905b3bb50e355d01bfa2fc9aa44420c9635361d0eaf3c070d1bde50633e4781a3a7c3d0e7ffbaf1036c7c96d7b678079fe95875dc0d3509e1be6d9714c67491929aa82d76fca1e64f28ff65222767e86c62ae47c5d0da77b857d754c03e08cd0f181cf42865073f13636bd6b2725bf5b0c5c2dd1a09215c22eb86414d4b838aaee615ad91b8016c117e0c236ac995a01f1242ae8e8e62a0d629f01c80395e3c4246195167bbd1416de85f6653f227fd857dd7e88bdcc88bbe4ca394ad12145388627ea71597d398f85fcc44778fdf5510bad20a52ef4533203b833cb386e97b8535ab714dccb5a85d785ec9755bbd1c4c6f36e182fe21d7d72087425f9f973a9eaac54a1099e38742549c684ac46f78c1b3eabc67df1cb26c04c6d3d39bdbe1240d07c5a66fd3bbd5c397fea200836c6c1ef2171788b7995107a6ed9cb4f2755f88c57d9f1f3e49ff6c15c635783d5c70ba539c3883695abd4fc080cd4498dbaca709b62828534c42e52dd6cfa5451432d092de6e734556488494e0b18a551508566db6b53caced1c349d85ab7d53cdb3699f232d3a01d39dcaaea487b05f65022dc90b4e222d7ea687672bfaa0d7c767e01e1e574890d516ed6104bfe18a0eeada554dc84672e0dc9c0fb53a282a9f99280bc01eff52f27ac0a3608d16618a7595884596922b7af9201212b4212881ed9faf4646e044d5f38fed2274a5183c39a9cfdfeee943f61acc9e5ebbdd3056719dbb653d384f2b1617d13b4e3cf99940417a6f5e24a339fb0aa082e15a6dcd9266b2051f08bea946a6ae7cec69eb84806f1b68d377a048f3dde1413f14c5b7511e8cce27a0f549357f2c0583c6623465a47f9e638544dd096ad51f512f00e2b40865542f6058214581150736f8cc06b18ade196448c2c52b7ca72981e50e60dc39c3fa469e9b79dbb25c100ef6586b97161fcf10510c9d3fd0cbef98cbd7b0758edc28a9e5d67ddc3769f36dd6ef74d436736e87a44882c423871be74ad4bda77f56f992a5dc62ed4d00bdb2d975aed59d88206b746086e40e2a12b6809cc83406d409430194f93c925c125d7ac806f116f22831a2be52e63114ac929dba11924bacb774f242ce613b70d030c8b8e034d0f936de25881b6f8d97b0906ee7db93a330bfa27e502666ae919a0e7680093ed03377bd6c810d72cbf25b9928c91266035d3d40aaa8379b536d788bddcf9b0161a8605569f591a180339b7e458a4ce0dd739c40cf8a1bb0ed06a0f0753c18a86a68491ff533e01fe79198739307be1dd90395a2c54069b2c82199aee17dd3de6b49023435fab140112a997c8fa0ac07df997929cd90cd2e0d1554cb4572e1669da73f64ecdaf444abecaf17a0b7825332a9c8c4d038dd7375addc20ef9132746cbc03e6beda79f888ca547b763314c1f2c78a04094f1f2b7bce8987c8be55d382390177e9890c15274323e9b55ae615486f830d58902f57a622aeab8d780f6f5a821f98419e52839b539b7fc9f0b4b053d05c2958e63b7beca3f93b15f470213a455c3aab9e72492adfca2bfc063f5f75c0784da0ec7e3fe7610a87d2d298e254fca1335b6736965720addefd6b7afc6496e5a894851ba982cb81c877eeda8e5b4cd1b0f3f98526516fe7fb5e32ce8f6a6f8741ceae8a96ce648df25f17982d3931d70d531e4447940960be6498cee25b3970a3397f30307c16ae6fdec41650876e0d0e6eaa9a37f31c6683dc2836e9cbf1c6afcd0e108559b31397d3b7690d315c1e0187a5545a1aaf2fc12f507d6c4866f2927238a62c44a8c94ad3e1da2ae1c1e7db10968eeff75b67455f7923e4afaad2e75e5765337f2aa0fac93a2f1c98b6e73745eb5442deb209e9704b2f7eb65424c574a47baf84591674e568c65238843bc099efda3995ff5a89c7ee3886f533886ddf94db14953d3d34f3f3075651ae021b0c03d2af448403a831e464e49f0c61a38619c8620727516687eda05be59b751b20aff4a931335bf0b043727dbf1aef50112a6033b7fb7e5e8b6771aeb2e22ce3d2dc11469919fda6cb718d9b8a767281a59aa997a51c953e8dff9a209acb8edaa8cb20b0740784f3ea1ba4e3d413becc988a5b773e941cebbff4d091520501cbd3bd2e0826f236a6af91c53210c70ed351f1581c8bb44e113ef32ee8b54a9b389d3378b756ee1558fb8fe9a9c46aebb56bedb48c054c16acb830dfb18bef1fcfc252ac01102e4251b25b9d61c6517bc760235ed9f0bae2f98aa2bf9c2aba3ad39fee9cf469d8d48cb80a3ab919b288351fb90b45f81f7723382db1cabff6bb71e6dbb9f257b926f28fda085fb5e4ab6aab3b5b78d1e33f8000000b393b0d57f9383db662214636bfd1b401bc81d671c81d1e0acf171a05ae0e0a13d53075e443bf85bf2d5c6c0fa6a10c58efa7246357ba0cbd3a23681472e0962c443c8917e464ad6ed2a3f848d461740ee6518581f621b4e67895cecd6115212c7e2b374a2"], 0x1248}, 0x1, 0x0, 0x0, 0x48804}, 0x20000040) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x0, r5}) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10a0}, 0x1, 0x0, 0x0, 0x20000841}, 0x40014) copy_file_range(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, r1, &(0x7f0000000240)=0xff, 0x7, 0x0) sendmsg$nl_generic(r1, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={&(0x7f0000001340)=ANY=[], 0x224}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) io_uring_setup(0x5473, &(0x7f00000000c0)={0x0, 0x7ba4, 0x3a, 0x1, 0x1c0, 0x0, r0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001540)={&(0x7f0000001600)={0x5c, r6, 0x400, 0x70bd27, 0x25dfdc01, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x37}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x220}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x14c}]}, 0x5c}}, 0x200000c4) 15:32:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, @perf_config_ext={0xfffffffffffffeff, 0x9}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00') mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0) close(r0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) [ 2381.058644] netlink: 4648 bytes leftover after parsing attributes in process `syz-executor.5'. 15:32:26 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:32:26 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fa, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:32:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:32:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) [ 2381.217676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=40003 comm=syz-executor.5 15:32:27 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:32:27 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) [ 2381.361477] netlink: 4648 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2381.391684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=40015 comm=syz-executor.5 15:32:27 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fa, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:32:27 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:32:27 executing program 5: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x2) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', &(0x7f0000000540)=@GFS2_SMALL_FH_SIZE, &(0x7f0000000500), 0x0) 15:32:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f0000004500)=[{{&(0x7f0000000640)=@in6={0xa, 0x4e1c, 0x0, @mcast1}, 0x80, 0x0}}, {{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000d00)=[{0x10, 0x11}], 0x10}}], 0x2, 0x0) 15:32:27 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:32:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:32:27 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) [ 2386.212038] Bluetooth: hci1: command 0x0409 tx timeout [ 2388.260129] Bluetooth: hci1: command 0x041b tx timeout [ 2390.308267] Bluetooth: hci1: command 0x040f tx timeout [ 2391.388579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2391.391137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2391.395545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2391.452405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2391.454117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2391.457063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:32:53 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465764173670100"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1018, &(0x7f0000000200)='^},\x00') fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x2) mount$9p_unix(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000280), 0x20b0040, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d756e69782c63616368655e3d4ae3027374fa2c70726976706f72742c636163687363616368652c616e616d653d2c66756e633d4250524d5f434845434b2c00000000"]) 15:32:53 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xffffffffffffffff) r1 = request_key(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, r0) request_key(0x0, 0x0, 0x0, r1) keyctl$clear(0x7, 0x0) r2 = request_key(&(0x7f0000000340)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='syz', r2) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) close(r5) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/131, 0x83}, {&(0x7f0000000680)=""/6, 0x6}, {&(0x7f00000006c0)=""/45, 0x2d}, {&(0x7f0000000700)=""/24, 0x18}, {&(0x7f0000000740)=""/75, 0x4b}, {&(0x7f00000007c0)=""/171, 0xab}], 0x8, 0x1, 0x10001) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) request_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000900)='#}\xa7++.-%j}\xb0^&\b/-\x00%\xa3\xe6\xd31\x05\xfc\xaa\xe3\bI3\xfa\xfc\xbd\x06yO\xb9\xc7D\xc9\x01\x19\xbc\fe\xb4f\xf2Rb\xb8\xc5\x9f\xfe\x8a\x9c\xdc<\xb1\xf4i\x9a\xe0\xf8U\xc9\x8d\xda\xa5\xc2mp\xb1\xb1]&A\x05VjTf\x03[\'\x9a.M\xbd\xbd\xf7\xaf\xb2\x85Q\xb8\x140\br\xdf\x80Qf\xd2\x15\xf4\x02\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00N\xb7\x13\xb7\xe3\xbc\x97A\xc8L\xee\xbd\x85\xa0\xd9\xfd*\xb6\x1f\xd3\xef5\v\xd5e\xd70\f\xeb\xce\x88\x17\x92\xc1u?k\x9b_\xd3\xa2\xa1\x01\xf7q\xde\xe6n\x8c\x04\xdbb,\b\x05Y\xffx\fj\xd8\xa7\x92f7\xce\xae\xf3i\x9b\xcb\xc1\xf3|\xbcP\xa3\xd63(\xa8#\x9f\x05\xd27\xb4\xdc\xb2\xad\xa8\xc7\xd6a\xfetyk\xc8G\xbd\xd1=\xd2d\x9a\xfc\x15\xdd\xc5\xa7\x95\'\x87\x8b\x80\xd5\x01\"\x81\xc5\xb0%.\x04i25F\x16o\\N\xdd\xbe\xf8\x82\xd7\xb59\x9dt\x8c\x1ee\a7\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffd) close(r8) syz_genetlink_get_family_id$wireguard(0x0, r5) r9 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r9, r0, 0x0) 15:32:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) pread64(r2, &(0x7f0000000000)=""/2, 0x2, 0xd72) 15:32:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) pipe2(0x0, 0x84000) io_submit(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 15:32:53 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fe, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:32:53 executing program 5: rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getflags(r0, 0x40a) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xfffffffe, 0x6e6bc0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010102}}, 0xe8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x40081, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "00bc95e1d7c7526002994560cca3cb55b66678e5eaea2741345629a1cec02f007569e0842af897601b10179ce9c733b49449827210b73d70a774f7e48cea1c35a571cf104a8db9faf6c7f7a86647a7a3a4a1740d6e9722cbf84f0d9ec33b9bab22d97351d38686158264793722ee3b2516645cf01a1a9ae08aa9192b0aa2d521be5340caa28d3e9aca95d6c911bf19b56b60b59d718961708152c187c5ec50437a3df5039deb78aa1ff0d0c1dce7ff26bb1fbbd65861e3bd8db8c3eabd654b68db5d517f3cad2b86c70d81f32e2a06e473b6ca25df162c2c9c07bc413dca11294ad0405edf9d6960235bf04a490a886388edae8fe3dc39031f5cf8d64613ce9bd37486c957324e5f11cb734692496a2ea9f4a345751bc9c2fe871e70c7b6611549350cde91af83ff7b1c57a2b3fa51cb7019e32b4a56fc4a3f0f78c41e923aed5cb89ab79fb2b1d7d2264638ec688486438cb5bfcda5bd3336c0eca5c4eb49ec0284e9b1356de8e47797300221dae6b2dc5998e5616720ffc947ec2810b3c85b606781abf15f61154565f58d2492cc6a2c56dffa9ba7ab98278ed6ee13653b779b893d8494c76cebde9bc51ed405e27e8daf3d6a9c0e3a09f155d92887781b7e1d1bdca9c0618f5ed7e0c97917b349b694a3d9005f9a672cd522aee5946b70b962128c7702b069399bf489ddb076c5ea02fe2b9030823c4247a6d22cd8c59b4290c56d47ccfa5167f94e9bf5e66bf4fb99c0585598f1113e111eb23cff6482c3060b77f79a77f71e9a6d8fdf8a7311ef5c2eaf7b102e638b3cd28644c29855f14b30e9c0631ead0c314870a30615de4c1bda467575f75edaf7569a77ba047b8443d96d8c862006bfcc7c21b848904100527b69d39c5caf1c3aa038fec350da5c1cbcdec3def9c83b0fe0e3d5f044685ca4e3da91622fcf098a3d4a827740c771dcfc67298754a2a1601e363c35ba09e0191097ac1cb793653beb39885a70b00457010111f12223bc6d6b8dfc16c29e31e27a0bf6c35b421907f10cd41cedd40709d56d7b8e9e3531c1acebc0a5ad21dc1a18affe006320ea8b5d7c4fca00ba4028f802c97ca82c5b321867ae14d8ec57614c9bc5a8b0b7df20bc38585a32d3cf58ea3f9402c478d84c9312e1660648f67ad131560dc6a4932657afcda99b9d5cbf9c8d8e19798f86e62c1dcf4e4bfcdedefac0cd9d9d21cc692a1eb6b7d5b1b2c1a1a49ea7c3566fa56a9d2cc025332479e61fe3a750e20446ebece96faaa58a355e59fb83205c2b389243ecf8141c4a75ffe7281adb43074b88a501682b32c5153f9b79441306a130d17536eafbc70bfe91bb34cf4488d8624cc4fa287fa60b6502c2cc1a049b0afc6bee5a6240238d5ef0e762791121ed045a939dafdf1dfe996325fd552570887ffc7f3066e857015ee8cf082339375cc0989afe26e125bd66579d44c56c4ffe86507b5155ac7f47ef66629ed7b6b11db00c40ef262f5609733ef55b27370e8fbfea36500ba3e9687232eb9f2f6af04dfbfa79a64cd7bfab080648330776ff4088b0345f436f869f5aea2dbd1155bcd62cb858f694ea8e8ca34c418dc7ee051a1a041f0521abd04a7319f73d8fb902688e58a69c9043e8392ff1ddb95a9f6f7c72d5ca765c809901b9e4da6929e6ab98fdbed606854e05677b5fc04b46c7e77550bb2cac1747774d9f5bb41071a2edfdf7ca48303b65800ae56b1d4254d504555484040c8a6a7ff987cfd65e29c921d6aa356ab1ab3c9c3f493cb3c55b414d31cde83084e2183bc2e173f5872c252ffbc5c97ff6712d5934fdc512575dc5db977bf7d5d0b92fc13fcdfd04bafb59d28aeac0d8d5c105b1d648f07753c1fb731f883d0957b1c56138847f34b9b669511580ccbe523de0abf33ee0ae793d659cb2fae7bb1e546eb3d9c4b805499627618b9d0400ff60fdafaf975cb3a9663eb1efef94676dce8042f0d93f11e93d7fcd25d7535c7a37f57b2835b2aefa0108924efba0390da2d939630b6047eb7fff3395d421a27412fadd589e4673f4e3b86d92c51b8d2451812ce4623b2c5de86894519f6e72e381c8fa39ef43f95bd4c812936794f709556e89f9f1044fc59237da4b40406d74b630f4b558e0ca5a7e85f45968ee2162c5c787123f3165cea19f4998ba73ea99af14de50017ced399b32c65fcc3b0069f2393958c5b8fae29ce59e3de43ff2fe4f603b264190ca1ebf9763cef6d81b3b16e59210c72f53f064e3e877791cdbb836cfc3fa9ca97c8adf27f1d012fffc243a95e10adb0de9d1b375c15d4b94e6e1ff7a2b1a3162fccab6e526e8db185555acdf449e15f9fb8b60185c61fc2f838e9c258ab52ece9a38214b0e8d100da3681e215eee5a2052de65f2568d49744786e56185416a53934f627f3fbb460880e5e399993743cc048549a08f9a4a1e11210fdf0ed031a3c8f44cee83af55bf74948f51126d53e6808915d630a0ec0e31884c3ea8b9eacfbda96501b44c200bb7caf55032ae99324af341291df2183ef4a6b0cb2f0272007dac9589149953e61f01e027627dacb58d5edc892fbe29146b3bce72431ec4e2fb4fb7a03af2c2e94c7d68cf59c2f618eff3e7e06d0e03608ac678b325dc4c7bf5af32b215b65fa9a1bed17292a56e9131a8af0e22b79a91f66e5294c9dfd0ee6546978e0d3d5420649f10c1b9f917351cf824887011a8b4ed165b5db68d8f8d4dbd87d337e49f05873553fe5d0e34638851a273618f59ce5fe148ca149cce089a8f4301a5507404939cf4993b4afa6f9d2a76c40adcbf4607e0e293483194f7756ac3fa8f7e2eb28be0a251d0e70f428d06731a135a02b239ab8a0a79472002e08291a7242c41251cd36185a1b31a32ba3da99897886dc37fc9c4d2a8d1"}) ftruncate(r1, 0x1000003) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') preadv2(r2, &(0x7f0000000580)=[{&(0x7f0000000380)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x17) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) close(r5) setsockopt$inet6_tcp_int(r5, 0x6, 0x1d, &(0x7f0000000000)=0xffffffc1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) unshare(0x48020200) 15:32:53 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:32:53 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) [ 2407.910213] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 15:32:53 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:32:53 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:32:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$dupfd(r0, 0x0, r3) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x15, &(0x7f0000000100)="9dfe1981ae4ee4a03b05162e800c914c4b8886556e", 0xb1, 0x0, &(0x7f0000000340)="c27a0193932277f99a4d1eadde14aa05c7243dcee46d6dfa69e88c00ca34b58acad1d72d69be5add9a3e067d243ccdbc59b9c47836a12f2ac9578afdaf1c7685348ed46c2206056983ca8c181636111c8d4fd03b930cd0c7a502c1588cc503d8fb6feb884d5a812e2545d8e7b5a026596d4ff62c59bdb7e6e87ca1e38667ee62cab9a1587caa28f751d7a990e4250ef2b5f75e0a9442bd060a6f95c9829f5be5ce31d69a22c9695c3755e8651c50e2b3a5"}) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) shutdown(r6, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 15:32:53 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fe, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) 15:32:53 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xdcf}, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x162}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x9, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1, {0x0, r7}}, 0x0) 15:32:54 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0) read(r0, &(0x7f0000000340)=""/124, 0x7c) socketpair(0x3, 0x4, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) r4 = fork() ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000003c0)=""/93, &(0x7f0000000000)=0x5d) fork() ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000000000000000000000000000000000000004e700000000000"]) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0xff, 0x1f, 0x3, 0x5, 0x0, 0x6, 0x8808e, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f0000000100), 0x9}, 0x100c0, 0x7, 0x8, 0x8, 0x1, 0x0, 0x4, 0x0, 0x8, 0x0, 0x7}, r4, 0xf, r1, 0x1) 15:32:54 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200, 0x1}}, './file0\x00'}) ioctl$TCSBRK(r1, 0x5409, 0x100) io_uring_setup(0x3fdb, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x161}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x7}) dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000140)) 15:32:54 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fe, 0xc00}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000300)='./file1\x00', 0xfff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x40, 0x40, 0x0, 0x5, 0x311, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x7e2, 0x80000000}, 0x0, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020257d6ea06451a474d5eae2b1112004e8f7e87ab96e824e29032d55bbd0dd73803a7266c8c58cf1a51b84a573867405990cf7cfab1a78952d5fc07be7bd8b5f8f3ddd1c5ea16b3153bed82ccf4113af7633ce56b0c073219c6f9b4b8a1292609fbd5fae81a69f5c433f8af28fd7731338633e0d004c07277919e09f9ba131aa5066df704c00306ef8d6dad71678e2cd94e402b7c05d54f7b20ff7c56d6955b2f9ec4a86a1d5f81d6ebd7dd2da835e7e39219e9a4416fedfc15ca1d27c9d5e6"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0x4, 0x5) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x30) [ 2413.028058] Bluetooth: hci1: command 0x0409 tx timeout [ 2415.076177] Bluetooth: hci1: command 0x041b tx timeout [ 2417.124188] Bluetooth: hci1: command 0x040f tx timeout [ 2418.683377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2418.685186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2418.690347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2418.748983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2418.750937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2418.753698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2419.350517] Bluetooth: hci1: command 0x0419 tx timeout [ 2419.351782] ------------[ cut here ]------------ [ 2419.352751] WARNING: CPU: 0 PID: 4172 at kernel/workqueue.c:1425 __queue_work+0xcc0/0xff0 [ 2419.354382] Modules linked in: [ 2419.355023] CPU: 0 PID: 4172 Comm: kworker/0:4 Not tainted 5.10.172 #1 [ 2419.356306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2419.357969] Workqueue: events hci_cmd_timeout [ 2419.358869] RIP: 0010:__queue_work+0xcc0/0xff0 [ 2419.359805] Code: e0 07 83 c0 03 38 d0 7c 09 84 d2 74 05 e8 b8 5d 51 00 8b 5b 24 31 ff 83 e3 20 89 de e8 c9 a5 25 00 85 db 75 2a e8 70 ac 25 00 <0f> 0b e9 ba f9 ff ff e8 64 ac 25 00 0f 0b e9 45 f9 ff ff e8 58 ac [ 2419.363540] RSP: 0018:ffff888046947c70 EFLAGS: 00010093 [ 2419.364628] RAX: 0000000000000000 RBX: ffff88806ce3ee00 RCX: ffffffff811c0c96 [ 2419.369095] RDX: ffff888047523380 RSI: ffffffff811a9040 RDI: ffff88806ce3ee08 [ 2419.370545] RBP: ffff88804f2b4900 R08: 0000000000000001 R09: ffff88804f2b4a87 [ 2419.371972] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804f2b4a80 [ 2419.373400] R13: ffff888020d3a000 R14: 0000000000000293 R15: 0000000000000001 [ 2419.374845] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2419.376458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2419.377631] CR2: 00007ffc987ba080 CR3: 000000003db44000 CR4: 0000000000350ef0 [ 2419.379050] Call Trace: [ 2419.379586] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2419.380636] ? SOFTIRQ_verbose+0x10/0x10 [ 2419.381453] queue_work_on+0xcb/0xd0 [ 2419.382217] process_one_work+0x9a9/0x1590 [ 2419.383078] ? lock_release+0x6b0/0x6b0 [ 2419.383875] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2419.384818] ? rwlock_bug.part.0+0x90/0x90 [ 2419.385693] worker_thread+0x61d/0x1310 [ 2419.386508] ? process_one_work+0x1590/0x1590 [ 2419.387408] kthread+0x38f/0x470 [ 2419.388085] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2419.388976] ? __kthread_bind_mask+0xc0/0xc0 [ 2419.389899] ret_from_fork+0x22/0x30 [ 2419.390661] irq event stamp: 297822 [ 2419.391425] hardirqs last enabled at (297821): [] console_unlock+0x92d/0xb40 [ 2419.393158] hardirqs last disabled at (297822): [] queue_work_on+0xa3/0xd0 [ 2419.394849] softirqs last enabled at (297818): [] asm_call_irq_on_stack+0x12/0x20 [ 2419.396808] softirqs last disabled at (297783): [] asm_call_irq_on_stack+0x12/0x20 [ 2419.398650] ---[ end trace a2e5768420303fa5 ]--- VM DIAGNOSIS: 15:33:05 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822adaac RDI=ffffffff87920160 RBP=ffffffff87920120 RSP=ffff888046947630 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f24078 R14=fffffbfff0f2402e R15=dffffc0000000000 RIP=ffffffff822adb00 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc987ba080 CR3=000000003db44000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000ff0000000000000000000000 XMM01=636f6c63006b61656c6d656d6b2f6775 XMM02=0000000000ffffffff00000000000000 XMM03=0000ff00000000000000000000000000 XMM04=ffffffffffffffffffff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88801ab81d18 RBX=ffffea0000061dd0 RCX=ffffffff816e9a15 RDX=ffff88801d0a1828 RSI=0000000000000008 RDI=ffff88801ab81d50 RBP=ffffea0000061df9 RSP=ffff88803e247bf8 R8 =1ffff110035703aa R9 =ffff888036f9cd47 R10=ffffed1006df39a8 R11=0000000000000001 R12=ffff888036f9cd40 R13=ffffea0000061dc8 R14=0000000000000282 R15=dffffc0000000000 RIP=ffffffff816eaa9d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556b8c400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe977192fb8 CR3=000000003db44000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004123d0a000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000