meter 'x' 16:27:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfc}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) openat(r1, &(0x7f0000000000)='./file0\x00', 0x200000, 0xc1) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000140)='^\x00', 0x0, r2) 16:28:12 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:28:12 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:28:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:28:12 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:28:12 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:28:12 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:28:12 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) [ 1653.242733] FAT-fs (loop5): bogus number of reserved sectors [ 1653.244278] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1653.250238] FAT-fs (loop0): bogus number of reserved sectors [ 1653.251547] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1653.283064] FAT-fs (loop7): bogus number of reserved sectors [ 1653.284565] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1653.533574] nfs: Unknown parameter 'x' 16:28:13 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:28:13 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:28:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1654.424873] nfs: Unknown parameter 'x' 16:28:14 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) [ 1655.279238] FAT-fs (loop5): bogus number of reserved sectors [ 1655.280505] FAT-fs (loop5): Can't find a valid FAT filesystem 16:28:14 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:28:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000140)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea0, 0xfffffefe, @remote}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="4cdb6c65300000000000000000000000d4728baf1c85bb658a9fdc69a64ec9db701c2f5b598f7b6100f597751ee00a03a5afec3514"]) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendto$packet(r3, &(0x7f0000000100)="8c502637be31ff5034ccb63a771fb90a3a8d5feac0", 0x15, 0x4800, &(0x7f0000000180)={0x11, 0x19, 0x0, 0x1, 0x3f, 0x6, @broadcast}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd, 0x5, &(0x7f0000000380)=[{&(0x7f0000000680)="6bb50cad11fbb40097573d519e08709d37d020335822ae3a8f77cf2d4a2db61d3c2ec38b880607fac7fcf51cdd80468893920ca27d190a24eb7594c7b507a6c5069e5495e52ec39e6f69106737ac3ece917c8b29a396c3da61bc5a57dcc91e1c8968c9653e1e25c570a1d06062ffd12fc3263e178e44d3d2f8e182692f29f7de20f50e413db8fef4fe7f65403e2c44b73672c331736f737e5812877694aa75818a38a055a76d7ce0e7bb73637cd00d9663617e185eee09c271a38ade9041aa04b73b803170786e85ce46eb4d0912aed046f9859ade1505c62957235e001541b5dada0d52d9fe14b1638028e4f93bbd79e543fcda0971ba9c76", 0xd9}, {&(0x7f00000002c0)="e9e3419eb14504da1e08e8e4916c53e652d834bc00274cc57cecbb7c70386fd2a3e23097f29831edbc8c12df8e1def75904060af755efadd9679b98fa0a4f36db82a6eeb6637e1aa7bf74fed638248d21ce5be017897268c63314e051bfe3e3c99b63bda24701924f493dafbb0453840f6d1d3d994aa1001a694148c22e40a8c0483ae5a7f2a62368424a540ceef9eaa2aa2e2f3", 0x94}, {&(0x7f0000000480)="e572ad12e567e9e55ff02850c5ed819ac46cd72fe15cee6cfd917b8c44687f20c88e72b07ab28be8579f0c3c225e749cee9b623407a610a3155bdd4216bd0ac45eb7dccad88bf84241de2606266c3e99b0c64a5d1150a69536b23a6184aced209b85b01cc8844b225a63ca3d9b318b6e77fe2fdc2403ba1e19cbb503e939f31aa1da8bd5f94cfa65e8af9b297a9facbf1530a19745d66a41c9fc5b3ffdfa", 0x9e}], 0x3, 0x6, 0x1, {0x2}}, 0xffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e2b, 0x0, @empty}, 0x1c, 0x0, 0xffffffffffffff45}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x3, 0x8080) sendmsg$inet6(r4, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x40, 0x9}, 0x0, 0x0, 0x80000001, 0x7, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 16:28:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:28:15 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x100, 0x4, 0x8000, 0xf001, 0x4, "6f0a116a8e3ec52f"}) [ 1655.798645] nfs: Unknown parameter 'x' 16:28:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:28:30 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:28:30 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:28:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) chown(&(0x7f00000000c0)='./file0\x00', r2, r3) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x4004, @fd=r1, 0xffffffff80000000, 0x0, 0x0, 0x8, 0x1, {0x8001}}, 0x8001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, 0x0) openat(r5, &(0x7f00000001c0)='./file1\x00', 0x200, 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r6, r5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0xc0c0583b, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) creat(&(0x7f0000000200)='./file0/file0\x00', 0x45) sendfile(r8, r5, 0x0, 0x7ffffff9) fallocate(r4, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c4, 0x7d37c636}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) openat(r4, &(0x7f0000000080)='./file2\x00', 0x103100, 0x200) 16:28:30 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x1267, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:28:30 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:28:30 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x300, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x800, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8880) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:28:30 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:28:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:28:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="736ed541dfcc00"]) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)) [ 1671.008490] FAT-fs (loop0): bogus number of reserved sectors [ 1671.009737] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1671.040687] FAT-fs (loop7): bogus number of reserved sectors [ 1671.041978] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1671.052080] FAT-fs (loop5): bogus number of reserved sectors [ 1671.053365] FAT-fs (loop5): Can't find a valid FAT filesystem 16:28:30 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) dup3(r0, r0, 0x80000) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) dup(r0) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f0000000140)='big_key\x00', &(0x7f00000001c0)='\x00') 16:28:30 executing program 3: prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000067000000ef307a0000008075aa"]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = timerfd_create(0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) socket$packet(0x11, 0x2, 0x300) unshare(0x48020200) 16:28:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:28:30 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x1a, 0x20, 0x7, 0x2, 0x0, 0x1, 0xb00c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x80000000, 0x3800000000000000}, 0x410, 0x6, 0x1, 0x7, 0x8000, 0x5, 0x101, 0x0, 0x6, 0x0, 0x100000001}, r1, 0x5, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)=0x9ab) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140), 0x0, 0xa50}, {&(0x7f00000001c0)="4bccf656e2a86c94b597240f6967f5131acebca897ba70e2e794992c7ef3a24d47590e67d0e4bd82a62d4ba8fef33e99ffeac99ce0a591cf5c0bbd0c5ad512097da59c4c58c0f2c856701a78e420ba319aa3323fe05020e7a6060775b0062d48518c57ca55725656dcb0753ecfe38269fa196337ed93addfa61413cb8d1f4a1f34887ac9726dabb906bbbeba6563981c3e959c1878dab347e30ea401eb31cfcb322c14e0470ed9e382b24d2587068b1f0435c4a34158ec577a601e4017bd917c", 0xc0, 0x95}], 0x0, &(0x7f00000002c0)={[{@quota}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '['}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000340)) 16:28:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:28:31 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xa33be5b4689835ca) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "c581897e48f8cbffc86ad2baad36fd7bd35dc28c"}, 0x15, 0x3) 16:28:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:28:46 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x1274, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:28:46 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:28:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) pread64(r0, &(0x7f0000000200)=""/48, 0x30, 0x7f) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000001c0)={r2, 0x2, r3, 0xfffff000}) 16:28:46 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:28:46 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:28:46 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x200440c4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000001140), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001a80)=ANY=[@ANYBLOB="010000f4d93e2bb0dcc95b18000100000018005eda", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2b66066c6530000c3fb3019f8ebe07073762a4cd5c99c09f35d1f531ab54cded1f"]) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xf3ce}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x1}, 0x0, 0xffffffffffffffff, r0, 0xa) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r2, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000001740)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) sendmsg$inet6(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback, 0x7ff}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000001280)="9fc412b9ba3383cea8f88e365fa67c0eb902fc7dc8c1c6fe4f8a61edca5e3ac2cfaaca164bda080a1c57697de52433b007843f1d119535544bf2c82235956f54b6a56fedd8dbdad4d03f0e5687b2f91d7c845e489940cabc6225f356b238b1b6535e09409ec5986d363ca9c6bd6fa97f7ff1f410e4718f4b1f0a38aa5726fccf85ce89506b6aa9ec00e8c0d25ce908a923930f26d1f8bdea340b9a9679f7e71c6715ecb914407d7e81b1448beb9adaf576cceadc9d9617b7beb7ee1a79f45f78deb192ee856be0638dccba099464e43f2ae9a646941cd7c08faba95fabaf18cadbba3ac417c3", 0xe6}, {&(0x7f0000001480)="34e8468c6201f71823243a5a186e8bf537f312f3e441ce8e6a97048e6d0bc461c43e781efb91b64da4f2887dbc25b910292256ff532ea658f312ad4639b03f1f4dede260d1bec34c965e7b78c91d131ffd8a681d05db0091f62b7f82117db1d7831e33b606abcff61ade982441bbbbd5779c578fddd98037db9040e426c801e090dbe0b4ce4ada12b6209d5757b034a9619be15963740c17eb43ee9d5f0cf79c83a1290e265cefa735c1efe830d8b158cedef73a6224cfa2367238afc07ab8e2", 0xc0}, {&(0x7f0000001540)="1bf8b123013fd896e17a1179cc6fed9c28f8866f412515e7fe04f0232b7252c506122607f1bad8e71ca7a0c8109d36bf0b2ffe927cc9ea1a7e60391a6386d1fd0e6dd96b3d3536eee2bb4088085c4b5da06c0c8c6bbe0cbc64c0777fcf079cdb38d7d2069d5b4eadacb3879be724e334034defc33916f3762e55825b00e903d360e6db4a7bb10f15ef524a19aacf528ceeb85d18aa704118ad27efec31f2597f6d074e4e2fe432d54297e9a4d462c8655dffed4a9409d499cba71063b463aefcfe0cec928233585901aa24178c427da53eef911985ddcc6b776061cc8b12de80068d147c9056095483d3b357e964a6d7bf7e7a1294162299cbc2", 0xfa}, {&(0x7f0000001640)="672565aa3480a054007f0b787a7cddded5ed2c33cdae04820a7f775b7ae748b67635aa0bd27805603635f9598e50102d631da9eb03e1acd67b0b4351c693a1b1d17093a913d821268cf0bb123b4a6d26fe1d4af5f689418029ee4a2e5f39c23a4ce837f87a618258559ba9537c783536bd2216cf9850b1b82f49d3188d161568a12d7798e88d1aade05d879206161107aa49ae8378b0b605b67527d869580a4e9316deefefb0763cceab9c311cb3e42324044d64afd6dcb9c6e9c0424d5c4a6812dae760eeb53aef87915155f061208dd6baad4f2db3448695e09e92b2ea44657924de76fcb2ddb0e3594535947380ca15", 0xf1}], 0x4, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x258}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/rtc', 0x22902, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f0000000080)=0x3, 0x2, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f00000011c0)) preadv(r1, &(0x7f0000001fc0)=[{&(0x7f0000001b00)=""/75, 0x4b}, {&(0x7f0000001b80)=""/99, 0x63}, {&(0x7f0000001c00)=""/49, 0x31}, {&(0x7f0000001c40)=""/233, 0xe9}, {&(0x7f0000001e00)=""/185, 0xb9}, {&(0x7f0000001d40)=""/9, 0x9}, {&(0x7f0000001ec0)=""/218, 0xda}], 0x7, 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002040)) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100), 0x150040, 0x0) sendfile(r5, r3, &(0x7f00000019c0)=0x2, 0x6) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000001a00)={0x8, 0x1, 0x0, [{0x6, 0x7, 0x8, 0x0, 0x1f, 0x0, 0xba}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 16:28:46 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:28:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1687.059555] FAT-fs (loop7): bogus number of reserved sectors [ 1687.060852] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1687.107678] FAT-fs (loop0): bogus number of reserved sectors [ 1687.109223] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1687.116429] FAT-fs (loop5): bogus number of reserved sectors [ 1687.117822] FAT-fs (loop5): Can't find a valid FAT filesystem 16:28:46 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') pread64(r0, &(0x7f00000001c0)=""/191, 0xbf, 0x6) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) copy_file_range(r2, &(0x7f0000000000), r0, &(0x7f0000000100)=0x4, 0x5, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:28:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:28:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7d, 0x1, 0x9, 0xff, 0x0, 0x0, 0x8108, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x4, 0x1000}, 0x10, 0x1c000000000000, 0x7ff, 0x3, 0x6, 0xffff, 0x4000, 0x0, 0x4, 0x0, 0x454}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:28:46 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x1275, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 1687.422567] nfs: Unknown parameter 'x' 16:28:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1f, 0x5, 0x3, 0x7a, 0x0, 0x6, 0x800, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x3, 0x591d}, 0x3, 0x13, 0x400, 0x6, 0x2, 0x2, 0x20, 0x0, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0xb, r1, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:28:47 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xd0, 0x8, 0x3, 0x6, 0x0, 0x5, 0x81410, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_bp={&(0x7f0000000000), 0xe}, 0x5100, 0x5192, 0x6, 0x0, 0x1000000000000, 0x10000, 0x1, 0x0, 0xfffffffb, 0x0, 0x6}, r1, 0x1, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xe9}}, './file0\x00'}) openat(r4, &(0x7f0000000340)='./file0\x00', 0x2000, 0x24) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x7, 0xd6, 0x1, 0x0, 0x0, 0x100000001, 0x520, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x10, 0x0, 0x1ff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x508000000}, r1, 0x10, r3, 0x8) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:28:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:28:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d913534f654ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x800, @mcast1, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000440)=""/192, 0xc0, 0x1, &(0x7f0000000040)={0xa, 0x4e21, 0xca, @mcast2, 0xc}, 0x1c) fchmod(r0, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2}, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x0) 16:28:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) syz_io_uring_submit(r0, r1, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, 0xffffffffffffffff, 0xd7) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:28:47 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) [ 1688.153384] nfs: Unknown parameter 'x' 16:29:02 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:29:02 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:29:02 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:29:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:29:02 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:29:02 executing program 1: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='team0\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:29:02 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x1276, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:29:02 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1703.438578] FAT-fs (loop5): invalid media value (0x00) [ 1703.439729] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1703.445209] FAT-fs (loop7): invalid media value (0x00) [ 1703.446336] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1703.449015] FAT-fs (loop0): bogus number of reserved sectors [ 1703.450398] FAT-fs (loop0): Can't find a valid FAT filesystem 16:29:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) fspick(r0, &(0x7f0000000100)='./file0/file0\x00', 0x1) dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c0c473c220b5b942d227766646e7f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:29:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1703.721508] 9pnet: Insufficient options for proto=fd [ 1703.731548] nfs: Unknown parameter 'x' [ 1703.769457] 9pnet: Insufficient options for proto=fd 16:29:03 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2201, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:29:03 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 16:29:03 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x1275, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 1704.353539] nfs: Unknown parameter 'x' 16:29:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:29:21 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2202, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:29:21 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:29:21 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 16:29:21 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:29:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:29:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) syz_io_uring_submit(r0, r1, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, 0xffffffffffffffff, 0xd7) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:29:21 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:29:21 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800, 0x0, 0xd2b4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0}) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005d5c0)={0x1, [{r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3}, {r2, r4}, {r2, r4}, {r3}, {r2, r4}, {r2, r4}, {r3}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r3}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {r3, r4}, {r2}, {r3, r4}, {r3, r4}, {}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r3, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {r3}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3}, {r3, r4}, {r3, r4}, {r3}, {r2, r4}, {r2, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}], 0x0, "5b74ac1f3cfa09"}) r6 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r6, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000000580)={r8, r7, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005e5c0)={0x0, [{0x0, r4}, {r3, r4}, {r2, r4}, {r2}, {r3, r4}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r2}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {r2, r4}, {r3}, {r3, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r2}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2}, {r3, r4}, {0x0, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}], 0x4, "5a59cfe8c4dbf9"}) r10 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r10, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000000580)={r12, r11, "66811f68e0c440bba4bcf609493241b2512dbb6769ef1fdb21219441b9d2937255c56ea8b443729c72bc47cf6386f73b7ce88432ac6f99b63a93b89e7443b46a773671dded77dc24ba79debef1df5ffcd9e2222930e25f8b7e1873aae1853d7d55b7b3b64a43657809e8ea816519bc0c7323593b9e24a473e537db27b2a3ba9b30d958d7ff8d4867d47df99ca9958a196ce0c3c2c20e2a72af42aafe94c107a043d58527121953dfabf2d3ba6f3e7b2f09c47a4a55c3f5a3e68724037035d781567270a828be9bbe626a85ac9fe77bfa461f8903fcd4986a3dcc6fa6ec88fc174630b23dd02e3cf61e2117f78c9d99aa7daf6f8a7d6c4a01ad17f50051be2848", "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"}) r13 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r13, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r13, 0xd000943e, &(0x7f0000000580)={r15, r14, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005f5c0)={0x2, [{}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {r3, r4}, {r3}, {r2}, {}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {}, {}, {r3}, {}, {}, {0x0, r4}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {r2, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r3}, {r2}, {}, {r3, r4}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {}, {}, {}, {r3}, {r3}, {r2}, {r3}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {r3}, {}, {}, {}, {r3}, {}, {r2, r4}, {}, {0x0, r4}, {}, {}, {r3}, {}, {}, {}, {r3}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2, r4}, {r2}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2}, {}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {}, {r2, r4}, {r2}, {0x0, r4}, {r3}, {}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {}, {r3}, {r2}, {0x0, r4}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}, {r2}, {r3}, {0x0, r4}, {}, {r3}, {r2}, {}, {}, {r2, r4}, {r2, r4}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r3, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2}, {r3}, {}, {r2, r4}, {0x0, r4}, {r5, r8}, {r9, r4}, {r2, r4}, {r3, r4}, {r11, r4}, {0x0, r15}], 0x7, "0493958913ef1e"}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x500000000) [ 1722.027064] FAT-fs (loop5): invalid media value (0x00) [ 1722.028211] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1722.065685] FAT-fs (loop0): bogus number of reserved sectors [ 1722.067247] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1722.085601] FAT-fs (loop7): invalid media value (0x00) [ 1722.086866] FAT-fs (loop7): Can't find a valid FAT filesystem 16:29:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_cmd={0x2}}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r4, 0x8931, &(0x7f0000000180)={'bridge_slave_0\x00', @ifru_ivalue}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000003c0)={0x5, {{0xa, 0x4e21, 0x9, @empty, 0x8}}, {{0xa, 0x4e20, 0xdc, @private1, 0xde4}}}, 0x108) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) fcntl$dupfd(r5, 0x406, r3) ioctl$sock_ifreq(r2, 0x891d, &(0x7f00000000c0)={'veth0_to_batadv\x00', @ifru_mtu}) [ 1722.362615] nfs: Unknown parameter 'x' 16:29:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:29:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) readahead(r0, 0x5, 0x80000000) syz_io_uring_setup(0x31f8, &(0x7f0000000100)={0x0, 0xb7c0, 0x20, 0x3, 0x32c}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x7df, &(0x7f0000000200)={0x0, 0x2737, 0x0, 0x1, 0x181, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r3, 0x4, 0x42800) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x5e89, &(0x7f0000000100)={0x0, 0xa80b, 0x20, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x810001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x2) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r10 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x4, 0x9, 0x3f, 0xf7, 0x0, 0x13, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x994c, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x4008, 0x400, 0xa9, 0x5, 0x200, 0x80, 0x401, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x10, r10, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r9}}, 0x80000001) 16:29:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:29:22 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000000000)={@msf={0xd4, 0x0, 0x4}, 0x1}) r2 = socket$inet(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = signalfd4(r2, &(0x7f0000000480)={[0x5]}, 0x8, 0x1000) fstatfs(r3, &(0x7f0000000600)=""/157) r4 = clone3(&(0x7f0000000400)={0x8400, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x1}, &(0x7f0000000280)=""/232, 0xe8, &(0x7f0000000380)=""/13, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6, {r1}}, 0x58) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x11, 0x5, 0x4, 0x3f, 0x0, 0x101, 0x1020, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xef99, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x5001, 0x23ff, 0x7, 0x0, 0x7, 0x5, 0x68b, 0x0, 0x7ffffffb, 0x0, 0x264}, r4, 0x5, r0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x40, 0x0) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000900)=0xe8) sendmsg$nl_generic(r5, &(0x7f0000001b80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000000940)={0x11cc, 0x42, 0x400, 0x70bd25, 0x25dfdbfd, {0x1a}, [@nested={0x1004, 0x15, 0x0, 0x1, [@generic="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"]}, @generic="1fc30ed3e0eb2c59a7c71f87c018dab8a788aadbda0e44c83ff9791a17b6aa950df525d06601befa83cf68bbeb8e3105f7a27de80756fee20923781f3136923016651002f39ff6f7ae68f6", @nested={0x78, 0xf, 0x0, 0x1, [@generic="c44ee9a83ca613882b0669100b0a4c0f4458e503bda829ae1a5e7b528f793fe3207b47cf6f6459e290d8300074ab2510", @generic="ca175d27dd274dd74174f3afe9062833038358f0b9b4c9cb80a09740aaf18bef319d350ef0d2e4b3aca45fcd5bc8c0ac", @typed={0x8, 0x45, 0x0, 0x0, @uid=r6}, @typed={0x4, 0x5f}, @typed={0x8, 0x3b, 0x0, 0x0, @uid=r7}]}, @generic="34dfdafc1abe1a9ef164559ca7916e0e3c7cac69f7ac599da4d591534749a5752ca98215ba814077a94b6d52994c87deb1583ff91c0e550b9457eccc931c598e788762b3905de32c1a7ae4447d22b58311ce32b872b6080f33ac83732ce829fe00e2f35d716d66f11d7dd5289c095de534883d25c1b8037f5468eca31cc07967648994c3dfb68d624a4715b393cab01895ab46f55eabc40d8bcd9d3fa29d000dabcf7a63a68af66c85128f4709101fbfc24a1863bde813cde7b70e60e7a8913db38376ac80a88177083f223b22e9b1e29fb689bd38e0e4c9543d74645f790364d312d067f80afbe822fc69ac57e7bbfe"]}, 0x11cc}, 0x1, 0x0, 0x0, 0x2010}, 0x4000000) 16:29:22 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 16:29:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:29:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0x4, 0x6, 0x8, 0x0, 0x0, 0x73074d1f, 0x40, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x7}, 0x400, 0x9, 0xb6d, 0x3, 0x0, 0x20, 0x7, 0x0, 0x10001, 0x0, 0x20}) write(r0, &(0x7f00000001c0)="7dedaad3515ceb1b586aa834a8fd0125389b9e60af2a143ce1c91e2e9094b0f150fc4025b7f04e6c8176dc242bf5f9d5556b0801a23c81f15fa40a91b1bb09b91c224286d3086599a7535003a1af6b75fad8f97620e9eb530c1e08c23742c822ecd68c851d9cb38acb4d6d6f5fa32e0b0c8d7da491b15a5f8f2105c8cf654692b83cffe8c4f57a5d7a", 0x89) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) [ 1723.140629] nfs: Unknown parameter 'x' 16:29:40 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:29:40 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:29:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @local, @val={@val={0x9100, 0x4, 0x0, 0x2}, {0x8100, 0x7, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 16:29:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:29:40 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) write(r0, &(0x7f00000001c0)="3fa0f772502bd48db0702bb71f36ae7f049ecf61422864c871be305ca75dc508f420f0ae73a8c3f75e690549e85d584c3b3f8106022c317d3c89afc7553ddfad696edf62dbe377d8dbc5872c8e106f79ccf6d92a0f4d58aadf410e9d774c938d269b6ec0bafe41e8fdce5fbaf834e5b464de64fadbd985b74b0087d3770a05db307c6a0cdba2a6db601ffd2b0106b46adad7c7a9dacad11ca2bd6dc5c348e28b22cb2e8a32606f326d448fbcbdc3dc5619a2606ef87a326eac26524a5b60ac747f1a2cdf761db97908", 0xc9) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) pread64(r2, &(0x7f0000000100)=""/110, 0x6e, 0x3) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000380)) dup3(r0, r1, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) execveat(r3, &(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000400)='&#())\x00', &(0x7f0000000440)='net/arp\x00', &(0x7f0000000480)='net/arp\x00'], &(0x7f0000000840)=[&(0x7f0000000600)='$\x00', &(0x7f0000000640)='net/arp\x00', &(0x7f0000000680)='}\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='./binderfs/custom0\x00', &(0x7f0000000780)='G:\x00', &(0x7f00000007c0)='net/arp\x00', &(0x7f0000000800)='./binderfs/custom0\x00'], 0x800) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x4, 0x3d, 0x3, 0x7c, 0x0, 0x9, 0x90001, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_bp={&(0x7f00000002c0), 0x4}, 0x40, 0x0, 0x8, 0x5, 0x9, 0x2, 0x401, 0x0, 0xef10c07, 0x0, 0xbe}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 16:29:40 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:29:40 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:29:40 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2203, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 1741.607879] FAT-fs (loop0): bogus number of reserved sectors [ 1741.609198] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1741.614287] FAT-fs (loop5): invalid media value (0x00) [ 1741.615491] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1741.632735] FAT-fs (loop7): invalid media value (0x00) [ 1741.633779] FAT-fs (loop7): Can't find a valid FAT filesystem 16:29:40 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) [ 1741.740579] nfs: Unknown parameter 'x' 16:29:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:29:41 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:29:41 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000040)={0x0, 0x3, 0x12, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x11, 0x0, {0x0, @struct={0x5, 0x9}, r1, 0x5, 0x2, 0x32e8, 0x3, 0x1b558000000000, 0x4c, @struct={0x1, 0x9}, 0x1, 0x6, [0x2, 0xe960, 0x9, 0x7, 0x6, 0x1]}, {0x9, @struct={0x9, 0x5b1e}, 0x0, 0x4, 0x3, 0x7fff, 0x1, 0x7f, 0x442, @struct={0x3ff, 0x9}, 0x9, 0x5, [0xf274, 0x1, 0xfffffffffffffe00, 0x8000, 0x8000000, 0xe06]}, {0x81, @struct={0x7fffffff, 0x1}, 0x0, 0xfff, 0x7, 0x81, 0xffffffffffff5381, 0x179, 0x475, @struct={0x6, 0x9}, 0x5, 0xffffffc6, [0xffffffff80000001, 0x5, 0x1bf1, 0x7f, 0x1f, 0x6]}, {0x3ff, 0xb794, 0x9}}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000840)={0x5, 0x81, 0x9}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000008c0)={0xb599, 0x0, &(0x7f0000000880)=[r0, r0, r0, r0, r0, r0]}, 0x6) r3 = accept$packet(r2, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000000980)=""/36, &(0x7f00000009c0)=0x24) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000a00)={0x5, 0x8001, 0x6, 0xe5d9, 0x4f}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pwrite64(r5, &(0x7f0000000a40)="7d9c5e0b23e8b9e4b27c38d2f81911a625c3836f17805aca48e9a7867e3b7dc100f038e70b56591c102e73a1f5c69f30b37eb688ce1917369b8b3c5ab551104f4de833049c7a09b61f1566a399aa80e0dd59b81f2c0b4de3af8001948aaf752bc3b6f034ea237fbf122a1dc7b7dbe1934e23be388d68ccc5c33dfd85d90cb8c410a48bdad730d6c5a10d14b578cf4779eca4705288ab3155ea5145ebc32fad937233b5cc592158829b337081d144fa949f23a162a6f1c0966c6bb30ef04fc8819bf115ebfbbeffd92a6a61aa801e6fd78c621bf06911b07819e043aafffdb4bf989095f5d85c00f0d7ca8449ba393453fde70c4ec73d68", 0xf7, 0x10000) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000d00)={{'\x00', 0x2}, {0x401}, 0x40, 0x0, 0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)="dc9806125eca4b9f991b4d19e07b6429fd4a2d673080c24b4c77a677e904be", 0x1f, 0x0, &(0x7f0000000c00)={0x2, 0x27, {0x1, 0xc, 0x7, "ecff4fe2a32092", 0x13, "5bc075164c979e287fbe883711fa054b263038"}, 0xb4, "5f94e400e88cc50daef7f49a0496a443f3a65bdc62869bfe573bac77681ea4aaf917d9c2abee44fcc4a34eb3956e8546aaa9c0d11587c9edbd0db80eacc9d611ff8ca6651226921d47a2766af5f1f500473eaf9913ce44a3c06cbf17d69965d3d8da8d907124308a81be0d8e5fc5cd17c83c545d6ad924bab2b82319b8d78cd6ae9b951641a2128ef64b4eedeca008df2b0869529632271d5984b5ade4900b6b1f66f331f6d6eb12069447ee0fdc0f10f49f59f3"}, 0xe7}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000dc0)={0x0, 0x4f50, 0x93, 0x7, 0x4}) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) write$selinux_attr(r2, &(0x7f0000000e00)='system_u:object_r:systemd_logind_var_run_t:s0\x00', 0x2e) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000e40), 0x2, 0x0) copy_file_range(r7, &(0x7f0000000e80)=0x9, 0xffffffffffffffff, &(0x7f0000000f00)=0x5, 0x7fff, 0x0) 16:29:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1742.440832] nfs: Unknown parameter 'x' 16:29:41 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback=0x7f00000b}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x49) r3 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x6e, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0x12a) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02f0fee225811b18118134c8dc5299d81662e8134bc75c63283bfcbe6ff589c48cca196ee9a809218a97c7b2a504dcf60bfee54beb2625f50fb47a2016a87d94fa7395e9c03b00d02363397c7f0b4101a0f45d714519c88c34489dbf4f9508429f8ba4128c64b50988cbf6119fa3427cd04865ead6bf42b9a68a098179b4f5c63c6563922e6db44e7450453e600577a9536fc897ee7ad3b2a8f9df88a46ae039e2c297bc01fc81f2cc030864737416c0462e8a3d285ef4f334760795b9", @ANYRESHEX=r2, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:29:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:29:42 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) [ 1743.367202] nfs: Unknown parameter 'x' 16:29:58 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:29:58 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:29:58 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000", 0x15}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:29:58 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback=0x7f00000b}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x49) r3 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x6e, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0x12a) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02f0fee225811b18118134c8dc5299d81662e8134bc75c63283bfcbe6ff589c48cca196ee9a809218a97c7b2a504dcf60bfee54beb2625f50fb47a2016a87d94fa7395e9c03b00d02363397c7f0b4101a0f45d714519c88c34489dbf4f9508429f8ba4128c64b50988cbf6119fa3427cd04865ead6bf42b9a68a098179b4f5c63c6563922e6db44e7450453e600577a9536fc897ee7ad3b2a8f9df88a46ae039e2c297bc01fc81f2cc030864737416c0462e8a3d285ef4f334760795b9", @ANYRESHEX=r2, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:29:58 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000", 0x15}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:29:58 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2205, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:29:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000060ec0)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "d4b0fdccd27068"}) r3 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r3, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000580)={r5, r4, "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", "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"}) r6 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r6, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000000580)={r8, r7, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000061ec0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r5}, {0x0, r8}], 0x9, "b9d53856be2e60"}) syncfs(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r10, 0x0, 0x0, 0x0, 0x40010020, 0x1, {0x3}}, 0x2) 16:29:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1758.772662] FAT-fs (loop7): invalid media value (0x00) [ 1758.773672] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1758.774714] FAT-fs (loop5): invalid media value (0x00) [ 1758.775545] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1758.777765] FAT-fs (loop0): bogus number of reserved sectors [ 1758.778672] FAT-fs (loop0): Can't find a valid FAT filesystem 16:29:58 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback=0x7f00000b}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x49) r3 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x6e, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0x12a) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02f0fee225811b18118134c8dc5299d81662e8134bc75c63283bfcbe6ff589c48cca196ee9a809218a97c7b2a504dcf60bfee54beb2625f50fb47a2016a87d94fa7395e9c03b00d02363397c7f0b4101a0f45d714519c88c34489dbf4f9508429f8ba4128c64b50988cbf6119fa3427cd04865ead6bf42b9a68a098179b4f5c63c6563922e6db44e7450453e600577a9536fc897ee7ad3b2a8f9df88a46ae039e2c297bc01fc81f2cc030864737416c0462e8a3d285ef4f334760795b9", @ANYRESHEX=r2, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) [ 1758.970940] nfs: Unknown parameter 'x' 16:29:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') r1 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r1, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000580)={r3, r2, "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", "53e73264eba58c5de5d2384abbe8dd8ea72be01bfcd6daa041050a23a5ec27d5dcf0aed87f9bcc869c6ebf1c3630de884b54dd6680e1dea34f661675f984828459321f42fb83d749067850004e9da3375748fa74a4330a66e3ea1e62f2f6413aef353e78ed2acf544d3beb96eefde8336ba9c02208396979ec975179883dacee433aefb6ff1cd41b6438d2f32e0763cdc310e834afb6b92ba385e602882f705da688e37726aef9cc058a02dab68133c46f77e2355193c18fc3c0d70c5856ca61d344026973f15aa81b370a08537ef3733f3c6e5ca3c7b5de9386956019ec0bba0cd387dd3f63606989591987a9dfb27d9225a164158997325d0ef88eae9e1fc00645611ce229cf3e40de15b3798048876412e5224b27b51f15785fc3f6dd8af730312e558319274b8ada98580edfb7097b11502fce5a5abc504db249764eef116b808513d550660c186ed0f5f4921fb7b6cc0529c1eb72438455c1f667d0bd0b171b89b519612913b0152cd1b420b2a9a4df55199a0ebe110d1fcf5eebb46b91e7ae1c5c95c48038dd738f8cf670c2de9bb3d3a6f092d5738fa7ed3d6a657841bb3bed0dee2895781d82e4e2dc6b51998e88e86ff53f21a4ae8ac780306d35e90eb2dc5a3f3a7d43f5dd7ce3807cb00600f7e8754eabcc815bbef1a5382cd7ca73cc85d53020c051882911aecdf9b0ce7c1bfdfa8d820d5efd4b60bacb7e64d98fac78810f085c51a19b89289772196915c93a0503694ed2af76b6960aecf0f1af22ada485b6ac62befdf35a0916678df405ca99925089cd3812d7b09e3f91f4daa94d464df0725249ede75cc626be7a8ed7cb87c0ed46675ed79618746c44729fe831f1cf4e485815bd9f7cdf455f6437f736858cf3026b18ba39d1bddbf58e9952b7d4b566955b80cc3c058fca3cb7e6c5159c3e7367d09ef3e8881179f51c10baf5cf29c8dcdbebdfa73cda0d9ccf8ab5af9240f88f78633be5d7d91da541cfcc01d59ac4936edf9920b67d19a1a093cfd4e594a8b369da465604212c6af340f0ade89223c631ba2db120ac9cfa9bda5b00358cea4c63d66f2b99dd3d575657609224a8874f12e80025173bfe43d35072e1ca14d097201178a8e27e62d4ecad1833aef65d12690ab97e0a15fd60302d1e7e516c3a9440e8535d0d4615d173607be209fcf2b91227519a808f51bc24197c0d63d0e522cf60427c95fae6e6c4bff0f4adb0902b8746738b1098bcf3a884850b7d18856d5ed07580965a693c8f95654cba9fb33f8c46b01347b074e5709fe982852e0f23e5a83215b3547edca8386bd9ebeda5807f3e6fe9dd1b3030abe916e3b7ba9c0b6130acd60f0c9719b3eb136bc8f3690b3f8e8f0d99f88bc6492024e59be459d5a08eaff70c6be9aa884faf2b69a915e191dd6ad34c75e30a06a714969e7a679756d8a76b1c8524deb5d6c868ef5e216369e6bb5207052fd7e5df3fcf8763ca2bfd9db080558571e851862dcd200491138dfd8e5b285f2e68d5e4968d8259c3df6d28fc5fb636ecc7d3fcb3f4af712c8b1d69f9012b07f7e34d8e5e76708c0a50b75d880b65fff32b4cd092fd1c6b2c36c36bea6a1308144ffc8ef9f6f717fe63dbfdfc0a95fc89ada3cb322a9033c5e72b5bc4cf8aadc1f730955fffde0a2881779e1d61b2874269bf1aec2fd075a1616cd3908edcd912f86a8003f39ad8330cde56d5875d495fa2d0941a07b20502f4211ed029b6546bfc50aa2299f8bcf6d524fac760cb74ed195f9cd8f99a027ab4556ccbb486d6a8a0914e654b6add10e68084c6f2e4c66a001bc09de3bf665642833680e4452a21f4686b865ba8e7ed9ac6a5cb932b25aa71a7b1e0146a4cf6390b96bd66fe6f26117b215a1262c8b8fbeed354937d55ca22a8c5927e20a620f4999bd91c0b523188a22efde8809abd90628c9593df695e4e3aad21831ff7db1d39b8839f476342c77cbeb15d12ed034c483c13cde875dc01fd14c1a8ec5529686d957b061f935cb9dbc24a8396cbc705cf7fb9d2169f7e3558ac7869fbd1c43aa9c9399ef0034366833c275000b59870c2ae4f2589c3c0d6b85b74b0a32a04bb5252e1e5201a3d082755a09720377361c5969e67842091fb92b6f7dc38abfb821bd40d0f1040595eb9481e5d28aa25605d87827e0905b350d9fd2750390f5d9025ef6ea30d15f616e932a4559d5c72b873300c8ff0dd44d4df7cd74f4f12f22d2855b2648bb6ecf492cc967cf9c32197c8ba8ec9d1e71aaf612a4dc4bc77aa49d858a6a0086160d0cabc5b31f8873d76cd4106f6a23031e75f6b97ec47a2fd26761ede9d980e40432d797da8e6e923d8bae939d925b84b944da98cd262a3009049d6983c2c17ddb1e693a24302b03497906af4323d0c5b2fb58eb6f9f5c256e56ec880e4d90e82ccc4b722e8f506217c9831d59e9de32e8f36163a43bb2ceb5cdcad19632d9d12bc64b2516cc8a28ddfb84f5c77e2aac8e1d45a7f31cae51f9fbc8a6629144518c291f2b5d5e7612d72213936c09653a91978a678eed3c90b9234ed165f581bfd1dd1dcf0c1286c1c3ce6fa77cced6db8c7ab033a565aa05193d6435ac3e45cd9957f0215cf0b45e71627f0b67dd979d04b916ac5317e73787704936f14a07988abfdc676b7a2cc5e2ace9e4a8b6773617c9067a01b984fcac1ad4d254c21c3259953e5c63fd3353cc4cb41b109c24280e7f40e8ee7f4dd232f6f774f37484cc9c7b5a7bcee9a1a9fef639d691592f63986777812c2e922a5ce336a8600856f94fd5eb3773794b252b971035b604d375cbd7ae53a42e0d1245b351bd11c02e0aaaa4ee7734c31be793398ef7a01d80a9f10d1265a3ec1f20bfb7434567b0a3e63a4a31edd15fc92eaee1e765c7dc8937a716e095bb1a6ac9cd63c5ad726c3d9b92d56a0f678a36c3ace4184139f2218f2b579458d94eb2c286e8ec8e098e62b76df1c4c9b5a8ece01172a75aadee376586c4b76de4d7b07c703eb35ffc7be32d78a94b0c8eddba4d4d6ff8712791a53ca61a92416afc7005c83193c4258a05d8a4aae34bc3d770a083df1badc1629659804152a351552c66265197ea63cc0ae3712b38b8b88ab1674ebeafd41211e62fb2bf1036c7865456478470a3e7276f2c60343d2a90b4a2799720f3a602930b656f369f59fbfd991d9c9d74fa0f46f8e7b8a37f78e212b03a9de446ef4f6d44e75f754dab9d5f0314ec30a302ba619b5bb85a474695ceef68a9b6669669387656e19335918d3d8537759b79f5a368b4b603f2891f151b8c828340811f87509f269ef4390e3b2a58fc8167b5ae7413d35d55667cab25636790be0beea3fc242af0d4a3a9c7d663fad6dbea1909ebf24fb38e95e014cc6afa979e83c21f5961a674c50300d9f9cb7e73708c316e66a9417719b3d9ae63e1ce33c437e900830c65825354ee88b17dec89dde804b7dc17203fa18072afa405a3add8a56cffb7fb691fac87c79bc09fb238e797f5a12e19ba70ef8f167ba0f45c46f32169295a5e6d86f566be3ee415b14e846bf358681ec554fa9d92f3573f41656a50b88596337ef766f98c5df83ff4f33185694a63d429e152b9f11c954f08f21b2607445be9d533c32fdb637537e94c4bd05ec69eb031c63cdccaa90ac852b0ce95d13ffa86ee708da2463d3d122dc235d50d92dfb55b49db8d6b6dc15701ec36006f55cbf4bdc45a67dc20874484175801514654a01a553b06817b179f92a9c8c34fe0d66529f6ca7f2b9b3f3724b80b6421448b96fd394a2f027864308f2b5788cd7b5098387cdeae1cb2ed26a4452ca0c5e28ef5c3c384181e9431ae5e0dfc7542a2a6037cb70468ee5787648223dc9c05696b9b28e1b8f78446798aed0f98e0092d32c356608b71d0716810fa247886f59eb360370221e8b2720654c6352da009c4bb0e7855a65d40e458739567c6f23b2c519126e012afa244d8a99733a1d1598b6c59f3ec9062e0c892f99540768bc9fe6bcb163577f05a7c1817b1806d3f766169aa1590fccc26b696a3e5ff5e338fd076f36e9713fd2b284ffd5ccbb68cc45d00249cbacf293908ccd47bfe1ce91329c75750762e91be71ef76ad2dddbea7ba8edaf70bf860a80ea8acc7183532b8f3498b1b2de9538e40b6cbc9b7f88c73b8952abd9c2d832d4d92bd2d00830d37418f33e58de35b49321654c762510b54c216a9f698772ddfe5082c8539e8158f3ea4e5b6fb4ce48dbac281fc20a7aebb5ecb021fede4c9c17e01e7fe5d8bda4e6fc6844a6014551044632654be6c519778ab18e28a67107163fff2ee942d2257d5dbeb3e19d6190ce4f9fc117e1d23f1f317baa0c377ea3b72d49ae28ecba77277a516cae36ba6ee91bcef308871efb5245cd9420bac262f3e91c96645ec5097ee802f0f103e9fcf8de5d809404006c91613e5eac580a05b135844e09e412fc728213a15ef64c035ce57c5c68724242d7f039c9b139609f523b9d8b2e90e3c85367ab09133d8c319b2d70b6d85ae0662b37a280ba8d02f80cb62e49dff9d062f536de074992998f0fe94a4a96310f262f3363d084ff5bf8bd0769a6c1f73a241b962310f21af08a8f7849ad64dfd37f665a3cedc817a788fcce1e739f784d8e336f5b83b6a1cf73225be911355e65945af07fef1190e31080d6b177b716f2244167e6eec76a275b4a3125df0eb196fd4fde958924282b47094497c1ffe0a128d6d9e409c69bb0c20a4fdc19a8b7ec4c4a54afb8746554c2846b2b713a91f678e688493db73e46ea8359357fe93e5f62542ecf874a56d7f7417f18b4fd0327b231ab73ad60d6532e533ccff78926faaab23722516a6525588c8b7fd064d12fe22994a19d20303f0761d4b6b59101884adeee090519df00f79b066bcfabbc92de6e9a6e8bf2fa5fb57d0c8cfa0448c61532f77faab33b25291bdd300a2c64c341c2a5a96a326e1a4216b4723c849ce2b6cd084693d0792571751a44ba30b80b62b4ff0cefcb5d508b93688abaf3283f8918861b35468ed4a44d4e2db9196531d9ad4d2ed8cd47457732e522289cc8cb3e45ac065075394826abcdf9787d8f0a89e79e3a053df27007f3316459cc7acb571486fae3e81238c8a329cfc2f2655bd349b29856babab75908b7d07657ffaa6e02981772e328465c2a82871fc1bc63ddbf12e2b124ace7a646e1412f95d04346e4ad5580e4de7a0b5c9deaf8e4449e222504a3d08825d30e745b7e875783cc8127f628c158e39333f07d6b1a14570b0632e1defa0803dbf8d6f987ffd3ac29243facf91ae4fdff11ea015b95df174438984598dea0ff3e820f973a987c6fa69a31fc6e5ba4920e6d7db43fa0cc6765351d781259d05caac19ee5d01d14101e369a567fc67dce565c42c1b16ab3c38a34bff78d64c7df1de4"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000600)={{r2, 0xfffffffffffffffa, 0x8, 0xd4, 0x10000, 0x7, 0x800, 0xd7, 0x8, 0x4, 0x4, 0x3f, 0x9, 0xf8000000000000, 0xf3}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0xffffffffffffffff, 0x1, 0x3, 0x3, 0x2}}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:29:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) pidfd_open(r0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x79, 0xfa, 0x2, 0x9, 0x0, 0xc036, 0x62001, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x2, 0x674}, 0x80, 0x3, 0xfffffffc, 0xe, 0x3, 0x80, 0x7ff, 0x0, 0x2394, 0x0, 0x8}, r0, 0x0, r1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') syz_open_dev$hiddev(&(0x7f0000000000), 0x6, 0x50080) fallocate(r2, 0x4c, 0x401, 0x6) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:29:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:29:58 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') ftruncate(r0, 0x5) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:29:59 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:29:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x41028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:29:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:30:17 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000", 0x15}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:30:17 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:30:17 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:30:17 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r2 = getpgid(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x9, 0x1, 0x4, 0x4, 0x0, 0x8, 0x2000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0xffffffffffffff7f, 0x101}, 0x40, 0xffff, 0xc, 0x9, 0xfffffffffffff800, 0x0, 0x1000, 0x0, 0xa1, 0x0, 0x6}, r2, 0xd, r3, 0x8) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:30:17 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback=0x7f00000b}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x49) r3 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x6e, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0x12a) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02f0fee225811b18118134c8dc5299d81662e8134bc75c63283bfcbe6ff589c48cca196ee9a809218a97c7b2a504dcf60bfee54beb2625f50fb47a2016a87d94fa7395e9c03b00d02363397c7f0b4101a0f45d714519c88c34489dbf4f9508429f8ba4128c64b50988cbf6119fa3427cd04865ead6bf42b9a68a098179b4f5c63c6563922e6db44e7450453e600577a9536fc897ee7ad3b2a8f9df88a46ae039e2c297bc01fc81f2cc030864737416c0462e8a3d285ef4f334760795b9", @ANYRESHEX=r2, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) [ 1778.623517] FAT-fs (loop0): bogus number of reserved sectors [ 1778.624230] FAT-fs (loop0): Can't find a valid FAT filesystem 16:30:17 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000", 0x15}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:30:17 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2270, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:30:17 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x3, 0x1000, 0x47, &(0x7f00000001c0)="e9ad524877caa9edab9c45066d8723118c57d5dc8c5538b8b59d82ebfdeb37b59be45a304a7ee9f850069fb32a63233453e2eb6e88faa49b5f7f5b15fd77e0a77eea16eb7cac96", 0xca, 0x0, &(0x7f0000000240)="bc2eb80ecf886015dd85c279e9aa63dce2f05a57497feec788e69bad684eba068508ca9037ef91e7f8779004109dcd41c89ceb0b6966b818f633afc14e2bcf38a70d6676e9401d5da99acb465b259e50e92aef2a3c9226f7bae3b75861ade56b2206028b20523d48f078d95b05e0ca4bf92c8c588fbe2f8f7fa9ed04eba0ca9f33e18f32c6f654a4fca2b9576b70ea77ecbecd5937fd14269dbebe07fb02451f0e82766ec2bf613be5d76e11184374a8d047c18c577a0a2d75275d870bd5ca5cd6872e3c4d0baab45467"}) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x7, 0x4, 0x7f, 0x0, 0x2, 0x100, 0x4ace693870dd293b, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x616, 0x2, @perf_config_ext={0x4be, 0x8}, 0x10, 0x9, 0xf7e, 0x9, 0x1, 0x9, 0x3, 0x0, 0xff, 0x0, 0x1000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) 16:30:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1778.667241] FAT-fs (loop7): invalid media value (0x00) [ 1778.668115] FAT-fs (loop5): invalid media value (0x00) [ 1778.668401] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1778.668968] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1778.790891] nfs: Unknown parameter 'x' 16:30:18 executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) dup2(r2, r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x154, r8, 0x102, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1e}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xce28}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1ff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x83d7, 0x485, 0x80000000]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x6, 0x200]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x200}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x20}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x2, 0x4, 0x9, 0x9, 0x4]}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x77, 0xffff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x55f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3fd}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffff3f6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7f4, 0x5, 0x4000000]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x800}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x85}, 0x4008004) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, r4, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xb9, 0x4b}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x7f}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xc05}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x3ea6}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7fffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x10000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:30:18 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2271, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:30:18 executing program 1: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x6, 0xf3, 0x2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') syz_io_uring_setup(0x941, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r3, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfff) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:30:18 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback=0x7f00000b}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x49) r3 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x6e, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0x12a) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02f0fee225811b18118134c8dc5299d81662e8134bc75c63283bfcbe6ff589c48cca196ee9a809218a97c7b2a504dcf60bfee54beb2625f50fb47a2016a87d94fa7395e9c03b00d02363397c7f0b4101a0f45d714519c88c34489dbf4f9508429f8ba4128c64b50988cbf6119fa3427cd04865ead6bf42b9a68a098179b4f5c63c6563922e6db44e7450453e600577a9536fc897ee7ad3b2a8f9df88a46ae039e2c297bc01fc81f2cc030864737416c0462e8a3d285ef4f334760795b9", @ANYRESHEX=r2, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:30:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x52b8, &(0x7f0000000100)={0x0, 0xf881, 0x8, 0x2, 0x2e8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:30:18 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2272, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:30:18 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback=0x7f00000b}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x49) r3 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x6e, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0x12a) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02f0fee225811b18118134c8dc5299d81662e8134bc75c63283bfcbe6ff589c48cca196ee9a809218a97c7b2a504dcf60bfee54beb2625f50fb47a2016a87d94fa7395e9c03b00d02363397c7f0b4101a0f45d714519c88c34489dbf4f9508429f8ba4128c64b50988cbf6119fa3427cd04865ead6bf42b9a68a098179b4f5c63c6563922e6db44e7450453e600577a9536fc897ee7ad3b2a8f9df88a46ae039e2c297bc01fc81f2cc030864737416c0462e8a3d285ef4f334760795b9", @ANYRESHEX=r2, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:30:35 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback=0x7f00000b}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x49) r3 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x6e, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0x12a) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02f0fee225811b18118134c8dc5299d81662e8134bc75c63283bfcbe6ff589c48cca196ee9a809218a97c7b2a504dcf60bfee54beb2625f50fb47a2016a87d94fa7395e9c03b00d02363397c7f0b4101a0f45d714519c88c34489dbf4f9508429f8ba4128c64b50988cbf6119fa3427cd04865ead6bf42b9a68a098179b4f5c63c6563922e6db44e7450453e600577a9536fc897ee7ad3b2a8f9df88a46ae039e2c297bc01fc81f2cc030864737416c0462e8a3d285ef4f334760795b9", @ANYRESHEX=r2, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:30:35 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x200) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:30:35 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:30:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:30:35 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2275, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:30:35 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000", 0x15}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:30:35 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:30:35 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000", 0x15}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) [ 1796.397873] FAT-fs (loop7): invalid media value (0x00) [ 1796.399121] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1796.409522] FAT-fs (loop0): bogus number of reserved sectors [ 1796.410831] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1796.453917] nfs: Unknown parameter 'x' [ 1796.456785] FAT-fs (loop5): invalid media value (0x00) [ 1796.457415] FAT-fs (loop5): Can't find a valid FAT filesystem 16:30:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) openat(r1, &(0x7f0000000100)='./file0\x00', 0x600000, 0xc0) 16:30:36 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2276, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:30:36 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) r2 = socket$netlink(0x10, 0x3, 0x5) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x0, @perf_config_ext={0x2, 0x3}, 0x42100, 0x8, 0x6, 0x8, 0x7fffffff, 0x10001, 0x7, 0x0, 0xc16, 0x0, 0x55ce}, r1, 0x80000000000, 0xffffffffffffffff, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x13, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000004100), 0x7fffffff) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f00000059c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @broadcast}, 0xc) r6 = socket$inet(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10) recvmmsg$unix(r3, &(0x7f00000073c0)=[{{&(0x7f0000000600), 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000680)=""/81, 0x51}, {&(0x7f0000000700)=""/12, 0xc}, {&(0x7f0000000740)=""/75, 0x4b}, {&(0x7f00000007c0)=""/7, 0x7}], 0x5, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000a80)=""/72, 0x48}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/135, 0x87}, {&(0x7f0000001bc0)=""/144, 0x90}, {&(0x7f0000001c80)=""/179, 0xb3}], 0x6, &(0x7f0000001dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001ec0), 0x6e, &(0x7f0000003f40)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/4096, 0x1000}], 0x2, &(0x7f0000003f80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xe0}}, {{&(0x7f0000004080)=@abs, 0x6e, &(0x7f0000004100), 0x0, &(0x7f0000004140)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000041c0)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004240)=""/204, 0xcc}, {&(0x7f0000004340)=""/255, 0xff}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/188, 0xbc}], 0x4, &(0x7f0000005540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000055c0), 0x6e, &(0x7f0000005680)=[{&(0x7f0000005640)=""/48, 0x30}], 0x1, &(0x7f00000056c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f00000057c0)=@abs, 0x6e, &(0x7f0000006c00)=[{&(0x7f0000005840)=""/79, 0x4f}, {&(0x7f00000058c0)=""/51, 0x33}, {&(0x7f0000005900)=""/47, 0x2f}, {&(0x7f0000005940)=""/101, 0x65}, {&(0x7f00000059c0)}, {&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000006a00)=""/229, 0xe5}, {&(0x7f0000006b00)=""/36, 0x24}, {&(0x7f0000006b40)=""/160, 0xa0}], 0x9, &(0x7f0000006cc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000006d00)=@abs, 0x6e, &(0x7f0000006f00)=[{&(0x7f0000006d80)=""/41, 0x29}, {&(0x7f0000006dc0)=""/10, 0xa}, {&(0x7f0000006e00)=""/27, 0x1b}, {&(0x7f0000006e40)=""/151, 0x97}], 0x4, &(0x7f0000006f40)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000007000), 0x6e, &(0x7f0000007300)=[{&(0x7f0000007080)=""/100, 0x64}, {&(0x7f0000007100)=""/111, 0x6f}, {&(0x7f0000007180)=""/158, 0x9e}, {&(0x7f0000007240)=""/186, 0xba}], 0x4, &(0x7f0000007340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400000100"/20, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48}}], 0x9, 0x12000, &(0x7f0000007600)={0x77359400}) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x3, 0xfe, 0x1, 0x6, 0x0, 0x1, 0x7563d0d7680c022e, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x211, 0xd, @perf_bp={&(0x7f0000000400), 0x5}, 0x10040, 0x0, 0x2, 0x4, 0xd5da, 0x2, 0x0, 0x0, 0xc215, 0x0, 0x9}, r7, 0x2, r3, 0x2) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="0080ffffffffffff00000000000000000500000000000000", @ANYRES32=r3, @ANYBLOB="0000000089dfbe0fc10000000000000000000000000000000000d182a021a6899e959018692ad67488c195c3b2f5d9fe0811bc7d8ce95cb2e160974bfc0305d18847767e4c26cfa6dd494d6de172f56e1839f5bc8ed9fd48543af97bd1345f7ed40e87e1aa3d40ff5d968182625cd44dea99faf888c568512b48b1aa4abec62852c9b86af7f959ce699bd3e8f002bb6bcb3cf5a08002c04b9b0cae4dacbd073de0220090082e5bb3", @ANYRES32=r4, @ANYBLOB="00000000000400000000000000000000000000000000000000000400", @ANYRES32=r2, @ANYBLOB="00000000060000006e00000000000000000000000011ca00000041000000d9675a904e2686d72faa357ee3f4f251cb1c3070bc5dedac69cf27fb00c095cb92b7bea29c1b66c850d1e039388817630243fbaf64b23be98c6ed914da331bee77ca40560039c092dde2be8f1a80ff796cc879aeefd7d6d4a158aee0c3b8d5c76e72fe", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@;\x00'/28, @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00)x\x00'/28]) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:30:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x80, 0x4) 16:30:36 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:30:36 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2279, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:30:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:30:36 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback=0x7f00000b}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x49) r3 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x6e, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0x12a) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02f0fee225811b18118134c8dc5299d81662e8134bc75c63283bfcbe6ff589c48cca196ee9a809218a97c7b2a504dcf60bfee54beb2625f50fb47a2016a87d94fa7395e9c03b00d02363397c7f0b4101a0f45d714519c88c34489dbf4f9508429f8ba4128c64b50988cbf6119fa3427cd04865ead6bf42b9a68a098179b4f5c63c6563922e6db44e7450453e600577a9536fc897ee7ad3b2a8f9df88a46ae039e2c297bc01fc81f2cc030864737416c0462e8a3d285ef4f334760795b9", @ANYRESHEX=r2, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:30:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x90000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/arp\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) ioctl$FIONCLEX(r1, 0x5450) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0x8) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000600)={0x0, 0x20}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) [ 1797.442614] nfs: Unknown parameter 'x' 16:30:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000900)={0x1, 0x80, 0x2, 0x2, 0x4, 0x1, 0x0, 0x0, 0x20, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4d0072d2, 0x4, @perf_config_ext={0x4, 0x80000001}, 0x160, 0x1, 0x3, 0x6, 0x3, 0x6, 0x3, 0x0, 0x3, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x10) openat$sr(0xffffffffffffff9c, &(0x7f0000000980), 0x12000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000008c0)={0x8, &(0x7f00000007c0)=[{0x4ca98029, 0x96, &(0x7f00000001c0)="a091a26900f787beff841bd53436911dfe65c80856319010571d71e105e54c3d65bb978b0d45c2fba448544036a30a5df958b3cfa549f25a69c3871e8dcbff5b87c4296ebb789369edfbe6aeb3ee256935ea3b00ee7c17a397149468a3a606ebcee151158b755ed71022ddfd65ebbb2daf358316ddad2382143ff326fd6d3b774d3f24109716eb66ceeb40fb207e643ae2f9b2048024", 0x0, 0x1}, {0xfffffffd, 0x97, &(0x7f0000000280)="6416bc7de1dc4c32980c5fef254955ce795d0544c4e858905e9c9d1f62b2fb6e0fc2398f0bd63a1eb05ef5ea570c7f0aac021ebb00e12901c69e4263f7bab709fd2657291095051ca62438ed1fc4608a22ed608b8826e1af49be0796e0924c16db4e91222d754a6cf45bfd93b59eee61940dd7dbc81a1a634ecc4c07e887f7d2eae2caee8ff6e82ec2e0b4d6b6d80f7acf9ca553017a14", 0x1, 0x1}, {0x4, 0xf9, &(0x7f0000000340)="f5ed28cc9d825fd00607cd6af37f13da8af60e28dbaacf270f70bc880c56251288b25d6ab95857460ac456d68ac97059ae53b3995d365df9c68fba231e42e5fda07ba67e21ffddda6b15d20bc115a8de79fcda2410ff479b8f9af67cd17e5bf48eaa0651173568aaae81c85ae4b4ffbacab83811e07c114eaed688042c097afeac5574d8c8973349f207cd219a5a02adb886aff868a376a06f130d6c41a544b2d9eea991f6387ce829bc390618b978411dacea1673078d3f64a9251025e781c5176dc2876af4be430c12b7eb0fe09af61c4b103fb0be45cf4ea2915c12e0c77079d981ebd4ca4de74a347eb7580bb53168246d6c98b9b3b54e", 0x0, 0x1}, {0x5d, 0x89, &(0x7f0000000440)="3493c6afb10aa79484c85e40eb60c88ec6ccee0e5548101b140c8ea4b22659a08113a67d382bf8d5efc22650e3648ccdc0fb1fde0aa6fcb9b1adf211060342b8ea23e7a56073c8a0d72e424a6e9852fe7ebf07a7c45bcc9f660f0f4b003618a63d8e9065e7fe9a9496d432684af41f0c59d87dc1b265a686e5e7476392eefbd2599c44202f786be8cd", 0x0, 0x1}, {0x4, 0x1c, &(0x7f0000000100)="c192f11aa7f7c5665357c0495a65abf87e45a12ab0de7f8ed2f584f9", 0x1}, {0x401, 0xcf, &(0x7f0000000600)="d955750a5fa6cca6b9b21bd5f17a1ab7d414cca9052a08cbc4dafba5af1713c2f0714078c34ecb8404f1485bd6e169a1bb4d0f48a65ab77d133f704f4bf3aa436e623a6d6650d0b57c2debd8c5b6f325fb769bf0815c14dedac15d9b9ea7b62970ac5ee86013772baaf843834b0236742159bab6a498dc29f3df5c69654f20591e79dc9f2b7887f7c653b98eaa769d9f5660f06c74b1a21a74a01f69723f1b824e52dac842bade730fa7d42f49e4b5786fb1f8ff4f2d8aaf54b876e3e3a2ed1a60b8591f431ea45c587eb6f577df29", 0x0, 0x1}, {0x1, 0xb2, &(0x7f0000000700)="b4b9ce1f0641d19239b63691bce324d61b3de810b149967a0ad45e5f48e8b7a983b4607cabc799c517e6feb996e23333cfe87b2fc94ed2f7da1698c1803d6f4b7cc86f5bc4c512a9a0a93ad8e767e6555cc59bdf1ad16ffccab4aec12a4e738f59aabe683825bbade7f7e1bc6481753275705adc24c1d75a0e14c28fe4d6e7a650e9414686dba13fa1e32d7c52b9ae7e6e26a2492d4abd2b615e75df76fbdb57b868dd45c7274e5d4b927755c9c48b82dbd3"}, {0x8, 0x28, &(0x7f0000000140)="a846eae5b8cbb49d02e30366eb57819463936a66e656e66d04ccb028e8d6c71ce17044a1ba25a010", 0x1}]}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1356c0, 0x41) 16:30:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:30:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r1 = socket$inet(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) ftruncate(r1, 0x6) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:30:55 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000", 0x15}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:30:55 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:30:55 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f8", 0x16}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:30:55 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:30:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:30:55 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x227a, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:30:55 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f8", 0x16}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) [ 1816.009790] FAT-fs (loop7): bogus number of FAT sectors [ 1816.010514] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1816.018835] FAT-fs (loop0): bogus number of reserved sectors [ 1816.019561] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1816.027039] FAT-fs (loop5): bogus number of FAT sectors [ 1816.028310] FAT-fs (loop5): Can't find a valid FAT filesystem 16:30:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x55, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x40038ecacc1f3a7e) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/connector\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/81, 0x51}], 0x1) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) [ 1816.212219] nfs: Unknown parameter 'x' 16:30:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r1 = socket$inet(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) ftruncate(r1, 0x6) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:30:55 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:30:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r1 = socket$inet(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) ftruncate(r1, 0x6) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) [ 1816.896403] nfs: Unknown parameter 'x' 16:30:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r1 = socket$inet(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) ftruncate(r1, 0x6) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:30:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:30:56 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x154, r2, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x80000000, 0x6c}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x40}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x40}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_IE={0x61, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x88, 0xe0}}, @gcr_ga={0xbd, 0x6}, @tim={0x5, 0x46, {0x40, 0x4a, 0x1, "322f7513dff73d9e6020d6e4a0ab5f1e382682563217d162378e246a3dbbe0691083857f019531f48fad22ec7d362368d6316bb406b033f21767bf861998d93d2fafd1"}}, @cf={0x4, 0x6, {0x1, 0x81, 0xd27c, 0x8}}]}, @NL80211_ATTR_IE={0xb0, 0x2a, [@random_vendor={0xdd, 0xaa, "1dd82213f7dc65a92d84a34aff72164662a7b2df134f0401da08df2f2b992a75e851562351cb62ce4cd491b3cfeabdd6828029b9ad92019e9d855573d24eadef123f38c16a7fc517b99839a393be2dafb8598031a066f47a46c05c95943ed6424e038de2174b5b3bb98cc0fd9535c064f5c39103a2f1f9bfb89b8c2e58bdaa29dc4d6d7e9878e28ee8b759d52f380ad6c092885c9df776124661f0f2112282a468840d5411e583243010"}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4040011}, 0x800) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)=',&.,/\xbc-\x00') 16:31:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r0 = socket$inet(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f00000001c0)=""/250, 0xfa}, {&(0x7f0000000100)=""/81, 0x51}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x7, 0x3, 0x80) 16:31:12 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f8", 0x16}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:31:12 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:31:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:31:12 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x227b, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:31:12 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f8", 0x16}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:31:12 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2272, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:31:12 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, 0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) [ 1833.202693] FAT-fs (loop5): bogus number of FAT sectors [ 1833.203857] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1833.204610] FAT-fs (loop0): bogus number of reserved sectors [ 1833.206366] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1833.232475] FAT-fs (loop7): bogus number of FAT sectors [ 1833.233850] FAT-fs (loop7): Can't find a valid FAT filesystem 16:31:12 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="043e0000000000002e2f66696c653000"]) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:31:13 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x227c, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:31:13 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000400)) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) r2 = fork() r3 = getpgrp(0x0) pidfd_open(r3, 0x0) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) r5 = getpgrp(0x0) pidfd_open(r5, 0x0) clone3(&(0x7f0000000380)={0x40000, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), {0x2}, &(0x7f00000001c0)=""/144, 0x90, &(0x7f0000000280)=""/169, &(0x7f0000000340)=[r1, 0xffffffffffffffff, 0x0, r2, r3, r4, r5], 0x7}, 0x58) r6 = getpgid(r5) pidfd_open(r6, 0x0) clone3(&(0x7f0000001780)={0x262009400, &(0x7f00000004c0), &(0x7f0000000600), &(0x7f0000000640)=0x0, {0x29}, &(0x7f0000000680)=""/167, 0xa7, &(0x7f0000000740)=""/4096, &(0x7f0000001740)=[r3], 0x1}, 0x58) r8 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffe, 0x50200, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x2, 0x7f, 0xff, 0x8, 0x0, 0x9, 0x14200, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x7}, 0x8000, 0xb16c, 0x0, 0x6, 0x7, 0x5, 0x4, 0x0, 0x2, 0x0, 0x5}, r7, 0xb, r8, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:31:13 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2272, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:31:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:31:13 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2272, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:31:13 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, 0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) [ 1834.606137] nfs: Unknown parameter 'x' 16:31:29 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:31:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:31:29 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, 0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 16:31:29 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f8", 0x16}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:31:29 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f8", 0x16}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:31:29 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x227d, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:31:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:31:29 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1849.947841] FAT-fs (loop5): bogus number of FAT sectors [ 1849.948340] FAT-fs (loop7): bogus number of FAT sectors [ 1849.948684] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1849.949406] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1849.982320] FAT-fs (loop0): bogus number of reserved sectors [ 1849.983255] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1849.990260] nfs: Unknown parameter 'x' 16:31:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="f92c6e3fbffb7cfcb51f96dfc15a615411ad4590db3f5d4c26d17d4fef567f90c62e9b64ff7714955dc4830955f977562665c91a5dc5dc34caf0f561980605a77069ea434747f68fa314ab0a7943aa7ed25d2565751be4d7b677e02d29bc2d8f19be9039555b4bb55aefa7880b189d06231ebb57811b94a38f471d27b489ec78ab464276d136a65ea9d54c0c317e8a487eb419126f08d512da6b93e02b568863c86ab36208277d67da934e095b05c4212a99be84254d22d318a6cced8393", 0xbe}], 0x1, 0x4) dup2(0xffffffffffffffff, r1) 16:31:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x401}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x101880) pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0xfffffffffffffff7) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:31:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) 16:31:29 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) pread64(r0, &(0x7f00000001c0)=""/209, 0xd1, 0x9) 16:31:29 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:31:29 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, r0, 0xc98) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=@dstopts={0x2f, 0x2, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x86}, @jumbo={0xc2, 0x4, 0x384c}, @enc_lim={0x4, 0x1, 0xf1}]}, 0x20) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:31:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:31:30 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r1) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r4 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r4, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x100000001) 16:31:30 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x227e, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:31:30 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x89, 0x7fff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(r1, &(0x7f00000004c0)='./file0\x00', 0x400041, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000001bc0)) writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)="4465a80e8e35ecbe8871f5f89c0105077f9b49f6e5bb967eb2536a664d9f7f91dada7384fec33b8770c7e635d830c979155fa8b9d0fcd1599e7e7a0a8b788a35c4603cb32327a60f3bf98b554409e7f0246615cdce4de08e8fc598c6f7ec06d0b1079769f2d4c18f0f13262b64a9f7eec2f8e5ba55f786c74733a0899099b784493e8f6dcad2c623322c", 0x8a}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000280)="b90404e241c7eb636b46515a389b904448b0fc2faf33884a2df85a3ebddc4418bd9881a020a0e24d7422ee744ce7b48f832ff22aadd502ac737b514bebd38c45f8c3b8a12cbb5445ddad90aef030825940c9374f14e75f41685dc12a9aaba777ddcfbef1e8187aa677279d26c8e62a2a1f2bb53bc2ba7f00903cfb7ee199f8887df275bc757c07699e838f9119fb3e6a8cb0f6eac4ce80ebc63feebd957d4e7dc50bedc276be64c83984d6a9af16", 0xae}, {&(0x7f0000000340)="55db87fbbe5a675554352a3bc9597388b7047c69c80fe22c5973efc46691a87ac84b8612085ca17109bb5ab2f1500f92aaa746831058346852a55677e9f01e2203f658229bdc80d7602fd27c6684f2e52e08cf0e2ebe770e538f118760596b7152ae8a56a383178a90af00376c228b1140690d9ea877e995805b7b6ca63bb9b535dbe1", 0x83}, {&(0x7f0000001700)="09af57b7e62e4ec689d26517cdbcd5f1e91f5ecac72deb059b13a837a9936948cf95fde53704ec6360af2e24f532d498120972ce361bb40b96aa42a2a9d88afd4aa429bd5d57ff1cbab4240c33bb30f2f3dcbec4593df8c2040ea2cf1eeee4d1556f7f5126093e294eab371261c3584f6807a94c49c96f2934d9c6cbcabbec78ed25467245", 0x85}, {&(0x7f0000000400)="716ca1d99bd4b8a4f74cafe8492dfdffecb167487cf8e037faa435dff01d80d0cc713f276cce4be399c9383fd5df6057462e7d3e1fff0afd803728664ebc577faf1a9b557ea6fb2100b65a33d457d50036d2b01ed184068f27d6553d114ec1ee85685b948b7059eb1012e8b1c031f91f69223361878f78038d68dc6cb52dfdcf11627294977faf9ef151067ef9cdef556a4e92a270c33315339dda81d2161bcf370115b8ee1c0471be69ea105863f237c67fa4ff91964ab1ab3421", 0xbb}], 0x6) r3 = socket$inet(0x2, 0x1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000001600)=ANY=[@ANYBLOB="0248b969cff35d97a444610fcb4ba961247d7ed4f1f3a6b1bfdca57d8ede8fe85e0b31c2c300ca39b6b7164000f86788ab7070deef39cded13d261712f5a7df6e855b1f273aa2082323602ab467c0d11746cf28de03b677f4fb295d69d249ea6ce3afb97d589dc48bed7b369223543014164663382c702bec9c4dc9e05ab38afd4597364cf275280d5e9c742eddae362df6e1ddccf130008000000000000bad8ab1bffffffff548a40be8469b9", @ANYRESOCT, @ANYRESHEX=r1, @ANYRES32=r4], 0x1c) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmmsg$inet(r5, &(0x7f0000001b40)=[{{&(0x7f00000017c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000001800)="7c95049d1186c83b7e69fa6f2e340dcd4594bcdadd10fe1e6596586f81004859793c40eff79500e2dbaacfbf78d55eb563221fdad63cb497b4deaeccf2586f69d4091dcfd83460fe1ba937f606171e9b0cfe55267e1e564700c9d07f8b5d6269a017ced6e94f07f6867e9de0804951b3680e2032d0d915b611a535b3530245e809525618b3cf08a1c21e25c96f7918746d1ed06ef414edb3f68f1f8e66171d1d0cc6debbc85458437a583e009733f0cd389f49042fef1824a922538f1f00176cb3e73004163162a2d15fcee4cb72ec567b83e9b93bc73a9d0525899e17d32e79dc163cfd2485fbaf83fdd14830e4aaef4f", 0xf1}, {&(0x7f0000001900)="374948738d333feb33a5055af83ec18f743c5c7607148c4060fa7fc2e439f2880a20c21e15545599bc62e622", 0x2c}, {&(0x7f0000001940)="f31c332651467c2f6ca4248b8f641e30eebb3d15fb077299ac2b93eb3547c873dee10f0974f57bbb0a6fb0f37c4cc768db394cf06313d63a6a772595137802dceb978d41dc792ac4f78eac244a6a209d0ff90c29f9b728065b639bb07ed498efbe7103a8ba2eb3f499ce330e4d14364d4ea954c2b8ec97aa23d1a1e04bce2bf2ddb77253380da3ab01216562cae9528980a82b38a3e63b93068ea2877a5181c96dd4bca240c1a2d8a9b5899af1c74e4c4920103a20bf9cf1530ab9d6215b", 0xbe}, {&(0x7f0000001a00)="afd91d73fb3b514f5184a0a1804cc561e526d8116fdf58b4be78cef89643f05ff6a1e208a7a541a4ab168bec80efe58ef2322b424bb644d94d1dd3732bba2d220c142d2b52efe33328a4c165389de8a9b9ccc05d676476a2f36c34223d534ad9e329b7b2c7c06a84d772ac1c763a0afdfe8cd2442620cd1d17f7a26f1250647a6101876fcc0e45689f84f3daa734dcbafb96aca673d19a45f8d6069e86aa1095a4faef04a387e77e30c15114a0f372c5fb269a5d99dc7fe6f13e9ce357310625820a52de", 0xc4}], 0x4, &(0x7f0000001d00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x5a, 0x0, 0x7, [0x8, 0x10000, 0x1, 0x6, 0x2]}, @ssrr={0x89, 0x13, 0x87, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010101, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x92, 0x3, 0x7, [{@remote, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x1f}, {@multicast2, 0x5}]}, @noop, @timestamp={0x44, 0x8, 0xf0, 0x0, 0x2, [0x800]}, @lsrr={0x83, 0xf, 0x57, [@private=0xa010102, @empty, @loopback]}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xce}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xcc, [@private=0xa010100, @local, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @loopback]}, @ssrr={0x89, 0xb, 0x2d, [@broadcast, @loopback]}, @timestamp={0x44, 0x20, 0x9, 0x0, 0x5, [0x2, 0x9, 0x7, 0x5, 0x1, 0x0, 0xffff]}, @timestamp_addr={0x44, 0x3c, 0xce, 0x1, 0x3, [{@empty, 0x8}, {@remote, 0x5}, {@rand_addr=0x64010100, 0x7}, {@multicast2, 0xffffffff}, {@multicast2, 0x9}, {@private=0xa010102, 0xffffcfe9}, {@rand_addr=0x64010102, 0xf7}]}, @lsrr={0x83, 0x13, 0xd, [@remote, @empty, @local, @multicast2]}, @rr={0x7, 0x2b, 0x8c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @broadcast, @remote, @rand_addr=0x64010102, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x48, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x17, 0xc1, [@multicast2, @loopback, @remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x37}]}, @timestamp={0x44, 0xc, 0x83, 0x0, 0x5, [0x0, 0xf5]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x60, [@multicast2, @remote, @rand_addr=0x64010100]}]}}}], 0x238}}], 0x1, 0x8000) [ 1851.104372] nfs: Unknown parameter 'x' [ 1851.216223] perf: interrupt took too long (2520 > 2500), lowering kernel.perf_event_max_sample_rate to 79000 16:31:49 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r1) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r4 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r4, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x100000001) 16:31:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xffc4}], 0x1, 0x8000, 0x0) 16:31:49 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:31:49 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:31:49 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:31:49 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:31:49 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x227f, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:31:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1870.255900] FAT-fs (loop0): bogus number of reserved sectors [ 1870.257491] FAT-fs (loop0): Can't find a valid FAT filesystem 16:31:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) pread64(r1, &(0x7f00000001c0)=""/241, 0xf1, 0x0) [ 1870.370660] nfs: Unknown parameter 'x' [ 1870.441978] perf: interrupt took too long (3174 > 3150), lowering kernel.perf_event_max_sample_rate to 63000 16:31:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000240)=""/190, 0xbe) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000000)) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:31:49 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2282, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:31:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0x5) 16:31:50 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r1) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r4 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r4, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x100000001) 16:31:50 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x227e, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:31:50 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r2 = getpgrp(0x0) r3 = pidfd_open(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$nl_generic(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x2e, 0x200, 0x70bd2d, 0x25dfdbff, {0x1}, [@typed={0x8, 0x2a, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x9, 0xff, 0x9, 0x0, 0x7f, 0x82204, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0x820, 0x3, 0x9, 0x2, 0x3, 0xe26b, 0x8, 0x0, 0x3, 0x0, 0x3ff}, r2, 0xe, 0xffffffffffffffff, 0x1) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) [ 1871.017129] nfs: Unknown parameter 'x' 16:31:50 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/228, 0xe4}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f0000000000)=""/40, 0x28}], 0x4, 0x9, 0x6, 0x8) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x4000, 0x8) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:31:50 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:31:50 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x227e, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:31:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1871.560677] perf: interrupt took too long (3987 > 3967), lowering kernel.perf_event_max_sample_rate to 50000 [ 1871.615582] perf: interrupt took too long (5014 > 4983), lowering kernel.perf_event_max_sample_rate to 39000 [ 1871.712236] perf: interrupt took too long (6274 > 6267), lowering kernel.perf_event_max_sample_rate to 31000 [ 1871.801957] perf: interrupt took too long (7854 > 7842), lowering kernel.perf_event_max_sample_rate to 25000 16:32:09 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:32:09 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r2) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 16:32:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000, 0x0, 0x0, 0x7fff, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x80) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800004, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}], [{@uid_gt={'uid>', 0xee01}}, {@subj_role={'subj_role', 0x3d, 'net/arp\x00'}}, {@euid_gt={'euid>', 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, '#%'}}]}}) r4 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000200)={r2, 0x3, r4, 0x880e, 0x80000}) 16:32:09 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x227e, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:32:09 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2283, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:32:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:32:09 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:32:09 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) [ 1889.884124] FAT-fs (loop0): bogus number of reserved sectors [ 1889.885488] FAT-fs (loop0): Can't find a valid FAT filesystem 16:32:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) [ 1890.033114] nfs: Unknown parameter 'x' 16:32:09 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2284, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:32:09 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:32:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) pread64(r1, &(0x7f0000000100)=""/75, 0x4b, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000001c0)=""/167) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) 16:32:25 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r2) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 16:32:25 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:32:25 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:32:25 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2285, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:32:25 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, 0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 16:32:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:32:25 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:32:25 executing program 1: sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0xfe, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2408, 0x0, 0xa2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x4, 0x0) [ 1906.645727] FAT-fs (loop0): bogus number of reserved sectors [ 1906.647012] FAT-fs (loop0): Can't find a valid FAT filesystem 16:32:26 executing program 1: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x882, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000100)={"8727447093e28430b90b03a4", 0x0, 0x30, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000140)=@copyright={0x1, 0x0, 0x6, 0x7}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) pidfd_getfd(r1, r0, 0x0) 16:32:26 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2286, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 1906.876066] nfs: Unknown parameter 'x' 16:32:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = getpgid(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001e00852e000000000000000000000000080000000000000008000800", @ANYRES32=r3, @ANYBLOB="230babc5e92c7627f3865846ee3585c2ac17a70e4422a3129c8a3b9790c7c640fae75c9fa42678d6d274e481be5887041b8043ac0eb63a7a5549da12ff0c58bd0f4ab68d19a622f617a87c9d4a75fd458af1c45abf5934e0a9fd4c707f65712fb888fa6a9c8a7448057a1dc928012639368ce00ddc77fa8ce46ec9d4a103ee815f1c6cf4dfbd950e040a8a96"], 0x24}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r0}}, 0x81) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x410c41, 0x22) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r6, r7) copy_file_range(r6, 0x0, r5, 0x0, 0x200f5ef, 0x1081030000000000) openat(r6, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 1906.965955] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 16:32:26 executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7f}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x24, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7fff}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xe}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x2f}]}}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}]}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_TUPLE_MASTER={0x34, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8980}, 0x4000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0xfd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9cfb}, 0x1c) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x400000000000070, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0x130) 16:32:26 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x4, 0x0, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x20003}, 0x0, 0x0, 0x100, 0x3, 0x0, 0xfffff001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x5e033, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="0100001800000000000000001ad4c52c77684c0595d41e9ab9f4ecf4170b9101d789469382925d72b9b99554db9e71682faeaf47193d80c5ba4685b04f77e870aa3c9c9e9d9ae02d17211882a5871853063f923e985ac090c26bf5d2f8752a804d20067885c0f88d0dbf8c6c97a9bbbecd50b0292d024b28ee", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x2c}}, 0x0) stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) setresuid(r7, r6, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x4e21, 0x4, 0x4e22, 0x2ca, 0x2, 0x80, 0x20, 0x42b4390ddb665110, r5, r6}, {0x6, 0x4, 0x72a, 0x66de, 0x10001, 0x4, 0xfffffffffffffe01}, {0x80000001, 0x2c8, 0x100000000, 0x6}, 0x1319, 0x6e6bb3, 0x2, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4d4, 0x3c}, 0xa, @in6=@empty, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1f, 0x1000}}, 0xe8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fork() ptrace(0x10, r8) ptrace$getsig(0x4202, r8, 0x0, &(0x7f0000000380)) fork() 16:32:26 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2287, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:32:26 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r2) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) [ 1907.751041] nfs: Unknown parameter 'x' 16:32:44 executing program 1: r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x70, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0xbd, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x3, 0x6, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xee, 0x20, 0x9a}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0xc1, 0x7, 0x1, 0x40, 0x20}, 0x2f, &(0x7f0000000400)=ANY=[@ANYBLOB="050f2f000314100481a58301028239c6a3a53317d3c91b0aa10b10010cf5fffe050500070b10740c30000281fdff03"], 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x400a}}]}) syz_usb_disconnect(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) pread64(r1, &(0x7f0000000080)=""/101, 0x65, 0x1f) syz_usb_connect(0x5, 0x6e6, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0xd4, 0x58, 0x59, 0x20, 0x7b8, 0xb21c, 0xdf2b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d4, 0x4, 0xf9, 0x1f, 0x10, 0x20, [{{0x9, 0x4, 0xda, 0x81, 0x1, 0x48, 0x7e, 0xda, 0x7f, [@generic={0x8f, 0x22, "9d47b5a32bc32f5b1cc43c4fd0fd4a3cc6b05c5a5353912f98623a530ad7d4dc1e35d59fab15625877ffc8691dd8754e049ddcac99e4fe39722148e7d591c53103c7a0c6ee7be61aafc95e31e52e46c304c3ac44855db31bf81fd03ac005c8636f7069d4991defe68596eb503f432459ef82659f830e361ceb32518013ee515e5c3811fb03ef3ae19c37ff46fb"}, @hid_hid={0x9, 0x21, 0x43, 0x3, 0x1, {0x22, 0xc98}}], [{{0x9, 0x5, 0xd, 0x11, 0x20, 0x40, 0x77, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x93, 0x6}]}}]}}, {{0x9, 0x4, 0x88, 0x80, 0x3, 0x52, 0xf4, 0x2c, 0x7, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "de7392ebfc2e"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xa5, 0x1, 0x30}, {0x6, 0x24, 0x1a, 0x8, 0x16}, [@obex={0x5, 0x24, 0x15, 0x3}, @acm={0x4, 0x24, 0x2, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}, @acm={0x4, 0x24, 0x2, 0x4}, @mdlm_detail={0x53, 0x24, 0x13, 0xc1, "c73b9e6a80fdcf2d194594c425f804536ab686466ff28e0995abddeab60acf884cf7efbdc321562359816289a402cc0e4cf2f5b22c7a0967e7c190e0d964883b4965816d591f9adc1cda38e78afd21"}, @country_functional={0xa, 0x24, 0x7, 0x6, 0x2, [0x0, 0x8]}]}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x69, 0xc0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xbcac}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x40}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x1, 0x80, 0x1b, [@generic={0x8a, 0x22, "fbc68be758fca73a9aa913fa725fb93a9a20e0cdfe5ff67d0d92d16178d3048931a1f608a87f1acdce02e2382238f01970e35acea3ff8018dfbe6ebaf8276d202cef54e67c2131f62930e56a3ef8eb46938c6ba292fdc7d80f62f5d83a4c160753e49c10cdc1a6199d6578efd49c22a29b57fa66f5c554a5e6497245f6644b66ee7358fe66f08201"}, @generic={0x9b, 0x10, "49d84dbe35a83bf9bfe386a7d634f80c6f389dc61790e9b5a1749c8c066d104e7954b03e6440786cc9aa9fa1ed27a8740c6cc8b32008954b354b800ddf2863501f10ec8a2baafb03cdaf9a33369cdad87918a641ba00db162c8656808203faa77be78da11f560ccc6f6a4def29db62d0d6bd50a761bd7b6c681fec4cbbc7bfdc25f7f5a1963e4eb2d40175e1e7b841b9b8940f12809d5f7eae"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x80, 0xd1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x3}, @generic={0xe6, 0x30, "6edfabe8a0d5e1af3ee4348bf8e07a41f24dfe33c8d8086011999b35a6091a30e7c8945c4ed1ac4c9b14d8d87bdaa242361df943e04b5de03fc413672fe8a9be3dea4ba45c0a279ded253aecee8f97c4d9e5d4c1d90f7c12560ec10f78a9e0a6f8d87775dc751a403c482450c4a830bd2c4aa5333527ebddbb2473f2c9d2d313de64cc4991d6eb884252763fd3c2fdb2d63d9c4db6c099bc7c7a38e5a47c109b37cd7066f62cb4407abb781f8a795e7f37719fcfae6b0b07292e497b833fe660462839c85215b0fbf1baf2d84d5197879741a373c1293fe92b3e9ac236eae8efec14f2ef"}]}}]}}, {{0x9, 0x4, 0x50, 0x40, 0x6, 0x12, 0xfa, 0xe9, 0x81, [@generic={0x65, 0x31, "dd66592c0e6c3a3b6e487fe12e37dd52968fbf78e7ffcc5ebdd1b59504cbe40373934406db47f2d52e147cd357defa33a1ca2362ff4d52c52b598393d0a248c36f2572e0bf027c54096faa7da628d3f051ca56ee3759d200ad501b13273ba69f17be81"}, @hid_hid={0x9, 0x21, 0x0, 0x20, 0x1, {0x22, 0xe39}}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x40, 0x1f, 0x1}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0xc1, 0x4, 0x7f, [@generic={0x57, 0x4, "5a1a0cb121d38ca33a53f0b601563c74af565aaca336805615c4f4fd11b4c9a054250eea2b7000afe7e52dc1055615b2951a4439e4906ad4a2940e10bb8c15cc62c41cbfd2a4055da3f05da16bfd7ca5077281dc62"}, @generic={0x86, 0x30, "ec1070bd60c9e679960b2b9ed2f8845e4a0ded39f002f6b17736b93754983e58403fdc30ad5975170ef562b432fda7efe2808786db1e5a84e890b3dae372c0d61bbff02c82a1bd2442cffcb2f6c4180911e4e2db13f3a17c98ed16f14abd97fac82f4bf12dbafd45b34cd5ac20b017ee65d4ff5d3544e96c2ab4a5e382eff706eab1e333"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x12, 0x1f, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x7, 0x0, 0x5, [@generic={0x91, 0x10, "9da6c67e81d04d97399754d41c5edb3a98c1c35035478eebec3e7a3f0a16a42c515c68a8952bc5218bb1673ca8db229eae0f7248aca702480bb2606e10d7ae9f5ffc386d8a89a7af6fdaebe59e8b29a9f10358e4b95514ce141e2ea5b7613e5d97228ebb75fda64d9b7ef31e624eeae0e94facfc44643fd15bb97e10bbd18f7599f59077c7e39a77e0dfd8a5f02c31"}]}}, {{0x9, 0x5, 0x5dd7accd6ef4fd30, 0x0, 0x10, 0x20, 0x9, 0x3f, [@generic={0x98, 0x4, "4b0f5a5c60d988bfb3358f5a96936768a6854f26963a02544de35370da5f4d297709bde4d1e3a43a50f9d50a6a6dfeeea49e672397bc48b7d41aeebfd6719625c86488acb2819eb0481c384dd71fe1acc4ce7ae05df52fa315be11870062e45015dc72e712834b24b2eaa8dd8a05cf66e45a5aa2a8f89e604ecbae51f81c075dbfe409da1c7c37549ebcfff0e693ab2027114dfc2857"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x30, 0x3, 0x9, 0x7}}]}}, {{0x9, 0x4, 0xfd, 0x81, 0x4, 0xe1, 0x23, 0xb7, 0x29, [], [{{0x9, 0x5, 0x1, 0x1, 0x20, 0x8, 0x1, 0x6}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x4, 0x3, 0x3}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x80, 0xfe, 0x7, [@generic={0x19, 0xc, "71798b672b3989dc7fec3afa45ba98f648f2a754ae118b"}, @generic={0x3d, 0xa, "85ec53799dc558dba5b4e288bfd242c6689c0f7947bc0c9d4482754cc5945b6cc6baabce518da70ba3fb3804b4e13b73443e5172fc7277814f04a9"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x0, 0x5d, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x1}]}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x110, 0x5, 0x4, 0x2, 0x0, 0x2}, 0x110, &(0x7f0000000c40)={0x5, 0xf, 0x110, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x37, 0x1}, @generic={0x20, 0x10, 0x0, "a4a7bfc3276f1459a5619feb4bd0e19881a867d313a7db46eb23395c26"}, @generic={0xe1, 0x10, 0x1, "17124c486371ce5473f71d4011d16d0b082d991d620612d130f33068519033af4576c732b4ab6ad6a895945df8b705a75c28c3d56c3ffbf5e7c7aa5ff0df8b758f41889dbc470e56cd551cbca0fd7ff4e117369e8fe4af711f8c0a2309279d2bd4f65798c000a3e846f1f2f6f3140f88e0bf7a2e37ffee0eaf2354b37951f0060c20418aa87cf447e457a47efb6883b7b5b294e45fac4ece31694378b3dea83a485e5de7e3c62d9219b8c81fd4708871106904153c90053d3754232fcb1f03ab5f52f25e350f1b82ef593524e10ca207c20a5848f2eb29fd9abef4697a0f"}]}, 0x5, [{0xe0, &(0x7f0000000d80)=@string={0xe0, 0x3, "5045ede81dbc58914aaef86e0c114a643e6e530deb6a24cc96c44e447415f99ac5a9ee79b159e2aab15e187cf2cc1e36380f76dcaeebb64004381ba0ad3e80f602c0a75804e17c8ddc8f1f5eb93ddb22bac0aaf0b5ab2d405f7be946f7b6d4354ff8a7272e71a4294c2adad12f2738d18f639cbd68593607aa3ccd001ffc9c23f2088274cafa31bf0691e7706d9b5ff3a83a475ff4e436746c40d9a4e44d8534d906517cb6bbc74feb7e05d241806480dc1b7967be65a7a827e5df2cf0659ddb2cad351e909d9f4f261fdc2efbbb56f9021f5b9de65f63c0f60e7a280a92"}}, {0x7b, &(0x7f0000000e80)=@string={0x7b, 0x3, "326147b8b50f4a2bc10899e692e194e0efdb48a1b3ffbc384fcd4185aa3c1e739aa2b2230763635f2f801d86e57608432979e8f20c19cbd8cfc80027c91c7f7e503b3d65d40f828fd415d2bb857829d5530416bf9eda8b646bd27dda0fd97ed049fd26921a1b2a9dc26b72038fc9e5c59639b586244da0b78e"}}, {0x100, &(0x7f0000000f00)=@string={0x100, 0x3, "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"}}, {0x8a, &(0x7f0000001000)=@string={0x8a, 0x3, "539146d1d2460fc3a0be7721ab15b3f6e5f619c299f67704a51bd867a15d24cfdf15f38485b1e289bd02b2a8aab83a66fa6bc79f80f3b9f514afaf1dc0d15dde94e5893f136f98fb6ac25787d44903c59b23c9a0aa14b8dfeca2dd72eb1bfc2aaae78967e3094823bc4c9cae8463a8daa0f3e2cc8474a8f8bde04af5364250e94fdc5ac63a5e34b8"}}, {0x3, &(0x7f00000010c0)=@string={0x3, 0x3, 'A'}}]}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x101202, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x108) r3 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000001180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x86, 0x1f, 0x26}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1f, 0x3, 0x4}}]}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x310, 0x2, 0x7, 0x7, 0x40, 0xf7}, 0x5, &(0x7f0000001200)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000001240)=@string={0x4, 0x3, "ca8d"}}]}) syz_usb_ep_write(r3, 0x32, 0xab, &(0x7f00000012c0)="e91cb40698128c277b02388d8d85e2c91db62567173e7802856796931a09d6e0cafe0b0e4dff192ddfc4d613c8f872d43aa5db1d8e9a4c1d09a12f727d0e21cd7afa2ca02be7de0c3c725c613b3bbbe4cc4ad6b1d8df74fa10f5b9e4b260aaff7b8b1bee1a97e5106131fb84c8f5783580e47823cb602c6f15bf388f67d6355da5a1e65dd86792ec1cd0fa764b35cf965bbbf38a56cefe2eb2e15518024bad1641725fedb7fbd0ad8fa8d1") write$rfkill(r2, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) 16:32:44 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2288, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:32:44 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1924.770259] FAT-fs (loop0): invalid media value (0x00) [ 1924.771531] FAT-fs (loop0): Can't find a valid FAT filesystem 16:32:44 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:32:44 executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:32:44 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) r1 = fsmount(r0, 0x0, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(0xffffffffffffffff, r2) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x100000001) 16:32:44 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:32:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1924.803188] udc-core: couldn't find an available UDC or it's busy [ 1924.804623] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 16:32:44 executing program 3: getgroups(0x0, &(0x7f0000000180)) mount$tmpfs(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x0, 0x80000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xfffffffffffffffa, 0x7}, 0xfb40a52ddc4d35bf, 0x3, 0x3, 0x6, 0x0, 0x3, 0x50, 0x0, 0x7ff, 0x0, 0x3f}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r3, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 1924.953855] nfs: Unknown parameter 'x' [ 1925.013844] udc-core: couldn't find an available UDC or it's busy [ 1925.015659] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1925.033014] udc-core: couldn't find an available UDC or it's busy [ 1925.034563] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1925.091775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:32:44 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2289, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:32:44 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) r1 = fsmount(r0, 0x0, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(0xffffffffffffffff, r2) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x100000001) 16:32:44 executing program 3: getgroups(0x0, &(0x7f0000000180)) mount$tmpfs(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x0, 0x80000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xfffffffffffffffa, 0x7}, 0xfb40a52ddc4d35bf, 0x3, 0x3, 0x6, 0x0, 0x3, 0x50, 0x0, 0x7ff, 0x0, 0x3f}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r3, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 16:32:44 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x4b47, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 1925.545588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1925.563954] udc-core: couldn't find an available UDC or it's busy [ 1925.565466] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1925.579573] udc-core: couldn't find an available UDC or it's busy [ 1925.580935] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1925.604564] udc-core: couldn't find an available UDC or it's busy [ 1925.605872] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1925.633124] nfs: Unknown parameter 'x' 16:32:45 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x2289, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:32:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) setresuid(0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000180)="b580ad9ca9e9613ac907d4eb08bcd1d1cec38de22c8dd813a1044902df000e31c6b2531501e0f675c288d40d1b02da934ea4d92be0b55ddf0c4da17bbf3c7317f194085236e43c3d5e6321405e4aa41092dfcc650d8ea3e60a", 0x59, 0x81}, {&(0x7f0000000200)="2d6a142fd069ba28d9ecdc1cf08d9ec9866faa2fe1d6a9cd2d8a92694b3e4af6f5f63caa42d98144650193d2af04b82e52d4929647a26dc728dabbae9ec25e8560f5a04557ee899e6df273199777f6dd45a26b2e1427cc1e4e69a08dee5fd11a013d4b486c3f692018cfb93fa6c95d32f986ecf694f670ee5817b9433e5478d3d54b04417f9b313272c9860b4bf9bfe234b44c11b3", 0x95, 0x80}], 0x2000, &(0x7f0000000300)={[{@huge_always}, {@huge_always}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 16:32:45 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) r1 = fsmount(r0, 0x0, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(0xffffffffffffffff, r2) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x100000001) 16:32:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:32:45 executing program 3: clock_gettime(0x9, &(0x7f0000000040)) [ 1926.014473] nfs: Unknown parameter 'x' 16:33:05 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x4b49, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:33:05 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) renameat(r2, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x40000, 0x113) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x400, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x51430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r4, 0x0, 0x80000001) 16:33:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:33:05 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:33:05 executing program 1: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:33:05 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:33:05 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:33:05 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1946.624352] FAT-fs (loop0): invalid media value (0x00) [ 1946.625604] FAT-fs (loop0): Can't find a valid FAT filesystem 16:33:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) listen(r0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x5421, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) copy_file_range(0xffffffffffffffff, 0x0, r2, &(0x7f0000000040)=0x3a, 0x8, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000470008000f801", 0x17}, {0x0, 0x0, 0x20000a00}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0xafac}, 0x1c) [ 1946.863747] nfs: Unknown parameter 'x' 16:33:06 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x5382, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:33:06 executing program 3: ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000000)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001ac0)={[0x3]}, 0x8, 0x80000) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffb, 0xe0, 0x2, @buffer={0x0, 0xfe, &(0x7f0000000040)=""/254}, &(0x7f0000000240)="d00114374db2e9ba96bde4d6c9bc59a366c381af5df16acb93702928330480706e34dc8a247ad9e86c5e79757cf20983983182f64cc4bcec2aaace8ca72867fe1494427d77da2d0e69cc57e576b4e25090621f6de34ead7e7d0676fe19297c2a8cb3f5ae1c8838661a655ea32ddbea6b4241fdc84c9b61ff38b02d6df12b7a588ba804f481a8c0c5538cfee58898846b9bc311742037f0b1716aa9792369d4a2d8303aefa534782a1f86f1e99e9971583843190409e5b7a10f6e9ea2a179f7e7402d1f6de34b455c8f7fe5be3543e55be4f9b98ef142e75c655716e07cf6cbe4", &(0x7f0000000140)=""/54, 0x7fffffff, 0x10, 0x3, &(0x7f0000000340)}) pread64(0xffffffffffffffff, &(0x7f0000001b00)=""/96, 0x60, 0xfffffffffffffffd) ioctl$SG_IO(r1, 0x2285, &(0x7f00000019c0)={0x53, 0xfffffffffffffffd, 0xea, 0x81, @scatter={0x5, 0x0, &(0x7f0000001700)=[{&(0x7f0000000400)=""/251, 0xfb}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/200, 0xc8}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000001680)=""/88, 0x58}]}, &(0x7f0000001780)="99de4ee07d2e40d8fb68308eeff89822413f2d0e0ab001ab3673fa978b26abe95e46092ca6422b1e664bc0c861c2726fb7d9d78028960082d7a74656d7b0af87bd37f97331efaf4e0e2dc8e376a287329852bf586aee2fbfc6aa21e4423cfdc7054ad89b9ef7804d9b45c9c19ff03d7ed5638571ea7d5d1be74983c9aae8dc3cd4f7cb0e97e43238caf033c2bac74b63641be0cd2af9ce5166d2a280e81b5cf1ac1461dacdc9fae1b24764bfa3205daa48dd38301035cc5e9a067a6c8a47f4091c3f7763c6e529368af200ac02c6ba8945c5a31453a10600e3890e97325a855eb945e0d86ec6ffdb2774", &(0x7f0000001880)=""/197, 0x6, 0x0, 0x1, &(0x7f0000001980)}) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000001a40)={0x2, 0x80, 0x6, 0x3, 0x1, 0xfe, 0x0, 0xf8, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x83, 0x9}, 0x10, 0x0, 0x6, 0x9, 0x0, 0x2, 0x1, 0x0, 0x20, 0x0, 0x5}, r3, 0x4, r2, 0x1) 16:33:06 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:33:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x46e2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xe3}}, './file0\x00'}) sendto$inet(r3, &(0x7f00000000c0)="67eda9971b9cc5fa0e5e0165a63a7384f904288208c6933bb530fe6f07a3eb7bc0e48f0aff55482d1dd07beae3e07390de28219605a770957e7792771b27157ff319e3884d5bb7ccc59e3d437557fa1cde3d92559ba91683d8fc027e1ab272df6b499360213333eb2a9b82", 0x6b, 0x20000000, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x1) fcntl$dupfd(r2, 0x0, r4) 16:33:06 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x5385, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 1947.485809] nfs: Unknown parameter 'x' 16:33:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:33:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x80]}, 0x8) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6985) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffd, [], 0x7f, "9656c75f04ba4d"}) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000280)) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x480c1, 0x186) copy_file_range(r5, 0x0, r1, 0x0, 0x200f5ef, 0x0) r7 = syz_open_dev$sg(&(0x7f00000001c0), 0x6, 0x40800) read(r7, &(0x7f0000000200)=""/62, 0x3e) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat$cgroup_ro(r8, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0) 16:33:22 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x5386, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:33:22 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:33:22 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:33:22 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:33:22 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x587982) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x148) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@seclabel}]}}) clock_gettime(0x0, &(0x7f0000004740)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004600)=[{{&(0x7f00000001c0)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000280)=""/53, 0x35}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000500)=""/44, 0x2c}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000580)=""/50, 0x32}, {&(0x7f00000005c0)=""/102, 0x66}], 0xa, &(0x7f0000000700)=""/211, 0xd3}, 0x5}, {{&(0x7f0000000800)=@sco, 0x80, &(0x7f0000000880)=[{&(0x7f0000001940)=""/70, 0x46}], 0x1, &(0x7f00000019c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000029c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002a40)=""/251, 0xfb}, {&(0x7f0000002b40)=""/127, 0x7f}, {&(0x7f0000002bc0)=""/77, 0x4d}, {&(0x7f0000002c40)=""/217, 0xd9}, {&(0x7f0000002d40)=""/42, 0x2a}, {&(0x7f0000002d80)=""/217, 0xd9}], 0x6, &(0x7f0000002f00)=""/238, 0xee}, 0xec2f}, {{&(0x7f0000003000)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/193, 0xc1}, {&(0x7f0000004180)=""/50, 0x32}, {&(0x7f00000041c0)=""/96, 0x60}, {&(0x7f0000004240)=""/91, 0x5b}, {&(0x7f00000042c0)=""/156, 0x9c}], 0x6, &(0x7f0000004400)=""/57, 0x39}}, {{&(0x7f0000004440)=@pptp, 0x80, &(0x7f0000004580)=[{&(0x7f00000044c0)=""/87, 0x57}, {&(0x7f0000004540)=""/19, 0x13}], 0x2, &(0x7f00000045c0)=""/20, 0x14}, 0x20}], 0x5, 0x40, &(0x7f0000004780)={r1, r2+10000000}) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) getdents64(0xffffffffffffffff, 0x0, 0x0) 16:33:22 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1962.940677] 9pnet: Insufficient options for proto=fd [ 1962.942382] 9pnet: Insufficient options for proto=fd [ 1962.960565] FAT-fs (loop0): invalid media value (0x00) [ 1962.961415] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1963.006124] nfs: Unknown parameter 'x' 16:33:22 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x587982) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x148) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@seclabel}]}}) clock_gettime(0x0, &(0x7f0000004740)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004600)=[{{&(0x7f00000001c0)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000280)=""/53, 0x35}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000500)=""/44, 0x2c}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000580)=""/50, 0x32}, {&(0x7f00000005c0)=""/102, 0x66}], 0xa, &(0x7f0000000700)=""/211, 0xd3}, 0x5}, {{&(0x7f0000000800)=@sco, 0x80, &(0x7f0000000880)=[{&(0x7f0000001940)=""/70, 0x46}], 0x1, &(0x7f00000019c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000029c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002a40)=""/251, 0xfb}, {&(0x7f0000002b40)=""/127, 0x7f}, {&(0x7f0000002bc0)=""/77, 0x4d}, {&(0x7f0000002c40)=""/217, 0xd9}, {&(0x7f0000002d40)=""/42, 0x2a}, {&(0x7f0000002d80)=""/217, 0xd9}], 0x6, &(0x7f0000002f00)=""/238, 0xee}, 0xec2f}, {{&(0x7f0000003000)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/193, 0xc1}, {&(0x7f0000004180)=""/50, 0x32}, {&(0x7f00000041c0)=""/96, 0x60}, {&(0x7f0000004240)=""/91, 0x5b}, {&(0x7f00000042c0)=""/156, 0x9c}], 0x6, &(0x7f0000004400)=""/57, 0x39}}, {{&(0x7f0000004440)=@pptp, 0x80, &(0x7f0000004580)=[{&(0x7f00000044c0)=""/87, 0x57}, {&(0x7f0000004540)=""/19, 0x13}], 0x2, &(0x7f00000045c0)=""/20, 0x14}, 0x20}], 0x5, 0x40, &(0x7f0000004780)={r1, r2+10000000}) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) getdents64(0xffffffffffffffff, 0x0, 0x0) 16:33:22 executing program 3: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, r1) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRESDEC, @ANYRES16]) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x26) kcmp(0xffffffffffffffff, 0x0, 0x6, r0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, r1) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x9bbb) r4 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, r4) 16:33:22 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{0x45, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x800}, {0x6, 0x0, 0x84, 0xffffffff}, {0x3, 0x7, 0x3, 0x110}]}) 16:33:22 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x541b, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 1963.274593] 9pnet: Insufficient options for proto=fd 16:33:22 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000010c0)={0x5, 0x20, '\x00', 0x1, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0]}) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) 16:33:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x20302, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x7, 0x20, 0x80, 0x8, 0x0, 0x9, 0x400, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000240), 0x8}, 0x20291, 0x27e3, 0x4, 0x4, 0x100000000, 0x0, 0x3, 0x0, 0x6, 0x0, 0x3ff}, r3, 0x3, 0xffffffffffffffff, 0x8) 16:33:22 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:33:22 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) [ 1963.844144] nfs: Unknown parameter 'x' 16:33:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000009, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x122902, 0x0) io_setup(0x7f, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)='%', 0x4}]) 16:33:23 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x5421, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:33:23 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0xfffffffffffffffc}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r5}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000240)={@local, 0x23, r5}) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) sendmsg$inet6(r4, &(0x7f0000000600)={&(0x7f0000000280)={0xa, 0x4e22, 0x800, @mcast1, 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)="5c70db5cfef79c7df78e3938445b9bc8768280c2310387683044a1a0e7db5d141316330a3ba675b8059ac0772dfbe0ac4d6bea59c2a92db037957b83417f78ce7e9bde8f4d85141395251bd0e567d6cd3b0356dac6b64f8ecaf40d11f34e5d6111e46fe07c4420625c902097625fb8fbf2f6", 0x72}, {&(0x7f00000003c0)="523817bedf970d0ba1b06dc4f1492961dfc8734a151c66a98350af7d6980cb84bbe62666bf8fb56a35cd6ae6c0d9557437e6b186a670212f47597586a44988477e9857a6fa1228f8f52d6900"/91, 0x5b}, {&(0x7f0000000440)="734b9a33cc24753bed905dbdd8dfb119d501dc856d68bd31c9a6d245e5ce0119a20b2132763d39155071bcc35bb65cdd9fe1501efe84f26ee268fb719bb4a2c1770c40272bf203a96e92", 0x4a}, {&(0x7f00000004c0)="932493ef0bd7d606fa1250d612c860638f843ae9158164995e9d791125187de610e140c8650ecacbf99775d52b51b6f50856f87d4021fc3754c60732bdc03289db7917490293f188ffc7e872bad06167c5ba1b30b807d1f9335d13868a96e90fbc8a18ee900daee2ffe3a1af9ab910290eae4d0056dedfbe9cbf269182", 0x7d}], 0x4, &(0x7f0000000540)=[@dontfrag={{0x14, 0x29, 0x3e, 0x40000000}}, @tclass={{0x14, 0x29, 0x43, 0xd4}}, @hopopts={{0x48, 0x29, 0x36, {0x5e, 0x5, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x1f}, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @mcast1}, @padn]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2, 0x2, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x9}]}}}], 0xa8}, 0x40010) r7 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0xb4, 0x1, 0x8, 0x0, 0x7, 0x20080, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff0001, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x400, 0x100000001, 0x10000, 0x2, 0x200, 0x7, 0x1, 0x0, 0xe4, 0x0, 0x7}, r6, 0x6, r7, 0x9) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:33:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:33:38 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000", 0x15}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:33:38 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:33:38 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x5450, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:33:38 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x4045, 0x480080) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x7, r0, 0x0) 16:33:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) pidfd_open(r0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x64, 0x1, 0x40, 0x2, 0x0, 0x6, 0x1820, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0xd}, 0x800, 0x2382b499, 0x5, 0x2, 0x3, 0x2, 0xffe0, 0x0, 0x80, 0x0, 0x8}, r0, 0xd, r1, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500001c0000ffff11009078e000000200"/42], 0x0) 16:33:38 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:33:38 executing program 6: ftruncate(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) [ 1979.693772] FAT-fs (loop0): invalid media value (0x00) [ 1979.694943] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1979.716881] nfs: Unknown parameter 'x' 16:33:39 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0), 0x915f) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB]) io_uring_enter(r2, 0x5396, 0x9af7, 0x0, &(0x7f00000001c0)={[0xc8d]}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc1}]}]}]}, 0x34}}, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000200)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78, r6}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r6}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x80000001, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6297}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000002c0)="416866a0316763b697397c62393d01a13495935fdad7673cae124c3fb12c6ab7223c882dc63e7f082ca5c332c5661bc51bd4f5f005ea127174a4a2cc4c50dc20fdeae26d529b00bed7f9ee27cc1a6938c7eec07c7b5efd74fdc4b4cb379882fc454bbb110c3f5c865fb9c9eed2a488264a2058b83daebbb0fc09ff3888aef93250e7880c93ab2fb51564be9951948a8e339d3624fb5c714837614596b46fb06524ab6f50c8a7ea396e9f0fcb368757bdcb9f67d8b0e5e6fa9ab9a4258f61e0b5ce732b4243c6736166abf1cf06469a981e73ed6af3", 0xd5}, {&(0x7f00000003c0)="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", 0xfd}, {&(0x7f00000004c0)="1a9e7ec94c42d5179d03d00f8b305cce3f057717f70284f7fcf8846bf8bc45aa6bfc6a72ecda15d0eeac07938b1410a7b9cbff4e383069ceaa48b02eb45e18968aa529878b3e1e9071b641061b71ccfa9d46f2efe0d4b3", 0x57}], 0x3, &(0x7f0000000580)=[@dstopts={{0x48, 0x29, 0x37, {0x21, 0x5, '\x00', [@pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0xfd, 0x6, [0xcaa, 0x7, 0xffffffffffffffe3, 0x1000]}}]}}}, @hopopts_2292={{0xd0, 0x29, 0x36, {0xff, 0x16, '\x00', [@enc_lim={0x4, 0x1, 0x5f}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x1}, @generic={0x1d, 0x20, "a085f662884b0c583fea42fdf08a6b68793c49a641bc8ba0f6aeaa23aad19744"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x20, 0x80, "f77dbb1a12cdb9fcb0c283758d669391289b7db42047e2bf0f2a5fb4eca1c8c677fa2fa8466329c3a0ec0761450a34f0dc1ebb3a6365bbd937cf5dd6d108b5d427cb6bfd789330849c2c86a768a9a36b494d12e2f6b3497ac8a1f94497e0705585b779720fab605df18fb019e53842d68af4f527c07e427b7430ce26d73d045e"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7ff}}, @dstopts={{0x30, 0x29, 0x37, {0xc, 0x2, '\x00', [@generic={0x6, 0x14, "0e9d066cf13f8cb05ac2ada39cbd19699e474407"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1f}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x190}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000740)="5a5c2f5df1e4fd8e34e4655d0fbe18353e75f433176742ff21bd94d729bb817c989b3e2182c9ba8d8580ebba0e14ee857ef1", 0x32}, {&(0x7f0000000780)="36ab40345be64751f368110a39b4a48197f08e89bedc54714e074e866c0252a9618cca616ebe93a2c84c554a6ec143032f72b4f0945377a4a400bd82ca39aeb365d0f13540ee3d1e2f4f6c00260cbf8c2673a5965b15957db3a9a8ccc79183b73145693bf1c178bb6f8fbda7f03ec032a9a1e7fa0becd5a135f56750eb059e2dd7724ddf91d312c4b659a169654c08cee796a2467eda1dc045c172a33d7441d56dac64203fadc0085ef38685a2033f4489767e0656", 0xb5}, {&(0x7f0000000840)="7858cb545d9f06c9", 0x8}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="6a4793403d6593cbc21fbee957a8a5bacc737bde1e50ebcee59ff8006f5a2e81ac50fe", 0x23}, {&(0x7f0000000900)="4d6de67cf44ca98ea38c4e4cc065d8e2d6b053fc2c46dfc4fdd5300c173728abf4345421a929e12e127c9e6e07e68db69a4f2ef284ed2029d91df058003ab8b04c9386cd4e198854b4d4b7993dc053a033a27e4d390a3ad4901949da2def0c15c1b57caba4ef3b59ae7d38e360ebdb0cf7d5b6e236f70bea4977b6ed0ba884b903a5127b34ec5f7b09abbd287ef3054a0e83d0e9ce26560842edace4cb95aa53f2b3cb1627061a9442ba96b2b0bebbe6739a3ce4eca2d005ac3ab35490a39743acf24869a1d9a9ddb370325c34e49bef2e466f88919b5974ba9ffad3aa729c6235cdf48b81b9a1c178", 0xe9}, {&(0x7f0000000a00)="d64359239dd6a24d14b3111727e73641a34904f58ef02c06d3bb71dd14bec8a9d4ff4af32f0e8b643db6f9bd9c4092ba3e00f2883c985df799e95f4863451a381912fc4a2663c4891a3a3810555b70f14e3941eae6f84012f0122104", 0x5c}, {&(0x7f0000000a80)="af7036782ea580abee104e3b45e88cfe721ab958eede54244807c690bbc04a275ec8b26efe7a3e6ab357e423", 0x2c}, {&(0x7f0000000ac0)="ce2b4b72f514c09b564ed3c581c9c79ee804f4592ff0bb554f7307fe4dcd399d4d8674d43d730c5286ff5b8216ea5cba9250e58918758da06731e6183b5b837fd9c5011dbfe1f33226625892392c1b41b867fe386f5fd52faa79ae0a149b9e2b2ca1ecf28c8c2eef781829799665608f4130c811c28868d4faccfecf9933948be637b578adbf70a6a489e3b7f990f244a87b0215ed416acfc59ab238dbb18bd5c6269d5b85ecf76e5214dbbbbd503da6490a130955502743629e264bb7216ccd8cad7856779015e983827271e2decb22cfebcf6d8a2db8cb9739135f6d4f863c872b4f5d1fc69c8bfca03bbadcded237d9bed8f29c", 0xf5}], 0x9, &(0x7f0000000c80)=[@hopopts={{0x30, 0x29, 0x36, {0xc, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}]}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)="14dd38133613df64d512d9289063ee8ddb3bf4ef5ae7b7f6e83eac0a7c8442239e8d8f5302a2f1368a46c77471168b9fbf0a9656a703a694bf40f29fd92a0a4c0c202272ead8bb6339b1dd29b6b7aa155c5a647c83a3d12ec31082f27204e7", 0x5f}, {&(0x7f0000000d40)="0d851e465c54aa95f23d9b0ffed9463f8082d9520c740dc57265b53b33ea22d21963dbee2b3e97f6715f2059ad8b912cb4bca5caa699381e9a599934b33867735c168f21bd31fb0b384ab43266f6e4b0353078f03779f37db06c8a1e1ccee357c80c3043ed29", 0x66}, {&(0x7f0000000dc0)="7a1566b836983583890ac601647235d362181de5d26bf4843c810e4fe55c2b99514ed427ef3a563578791f64f117bfcb7bd9c7fc29ea3aee2fefd3aa297051923b85c7f757794e1649689283d0b30e54c30e88a4017dee5df87e911367661fb7dbaffc2f3134ecc9d53c8ea06451449fb653c53bd3a6869a5117f22b045d72aef0191895bda3f144b9b2e0a7e7afaba7f1ea510df8e921db2d43218bd5231d4072aec8535bb2ddb4dabfbc94e2c87ed2654aed96fe34c8556ade93e45d5a96dde7f255a364d03a0e74e65bc7f040b4b65353", 0xd2}], 0x3, &(0x7f0000000f00)=[@dstopts_2292={{0x40, 0x29, 0x4, {0x88, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3b}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hopopts_2292={{0xf8, 0x29, 0x36, {0x73, 0x1b, '\x00', [@generic={0x20, 0xd4, "5e18e9ccb3f0fba0bc2a24dfdc9e91eabc0b411a4f2e137b4f6e7d66882215cde8e37f84a4d036c856d47582b7b08648bc273bcbf61485b520686f0520141ca31c2a9a5035f10f9bbc5f58a2c7c922516e4b79c9eb31f4148b616fa02099817bda1fdd14dd5bac7fbb193fb6c43e7e773af8cf6deec9a8a773675f3d43e0ce5485168c618d1228e108496a9a4ed11224e777a99bdc047bcc91447cfa88d43755d8dfe934dd103615fb187414d027bcf7f1ebf1e94230b67db1f31e298ff2447cd58c5609ca1ffd6e8427a49d4c35b712fda2af85"}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x40000000}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r6}}}, @dstopts={{0x20, 0x29, 0x37, {0x67, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x1}]}}}], 0x1e0}}], 0x3, 0x40000) socket(0xf, 0x80000, 0x0) write$binfmt_elf64(r0, 0x0, 0xfdef) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 16:33:39 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x20, 0x0, 0xc0, 0x0, 0x5e, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x4000004, 0x4, 0x3, 0x0, 0xfffffffc, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_elf64(r2, 0x0, 0x48) tee(0xffffffffffffffff, r0, 0x400, 0xa) r3 = eventfd(0x1ff) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x0, 0x20, 0x3, 0x0, 0x6, 0xa40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x14000, 0x200, 0x0, 0x2, 0x8000, 0x3, 0xe64b, 0x0, 0xffff, 0x0, 0x6}, 0x0, 0x0, r1, 0x8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001f40)=[{&(0x7f0000001e80)=""/181, 0xb5}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{r0, 0xc424}, {0xffffffffffffffff, 0x9530}, {}, {0xffffffffffffffff, 0x18}, {r3, 0x100}, {r1, 0x8}, {r2}, {r4, 0x400}], 0x8, &(0x7f0000000240)={r5, r6+60000000}, &(0x7f0000000280)={[0x4]}, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f0000000540)=""/10, 0xa}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/205, 0xcd}, {&(0x7f0000001680)=""/166, 0xa6}, {&(0x7f0000001740)=""/142, 0x8e}], 0x5, 0xb57, 0x9) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r8, r7, 0x0, 0x9bbb) creat(&(0x7f0000000040)='./file0\x00', 0x0) 16:33:39 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x5451, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:33:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000140)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)=ANY=[@ANYBLOB="011200002100000018000000", @ANYRES32=r2, @ANYBLOB="0edb964c5b2d02da42950f6a6c653000"]) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x63}, 0x1c, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xc912}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x32, 0x2, '\x00', [@ra={0x5, 0x2, 0x2cf}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb5ca}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xff}}, @tclass={{0x14, 0x29, 0x43, 0x343}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000300)="5acea4be2409163a29c1acb9b35623aeabd343d65b0911cb3a7bcba64e13665816dfe46a5fe16bc75188b01978f77762d535c4d9298e617fc0861898e3f83be35417b499acbb936b12a642f9526b4553e44fa52326f4e60edd2b1f611870669b5de7cc1153144b981aa74afccaa5e6438a661c05de8e40efde492df7861d22b5e84e187d1f157d75e90167120efe531d1f247130182f0b19d72737ad68ff3a7e94a017ca361132c8a2d3235a26ec8563e7ad46796e77c4", 0xb7}, {&(0x7f0000000680)="3f6e23593b2a5ac337d7432a2de597d8ebf3473129d9d0ab58d938f7aa01d5bd9fb160e278250edd03d74e710c35ffe0db10bc886eb1294c2d5f13cfa20d19e3926583978c2d0db509de59f0bf472ceff150c852959d6c5ed852805666c2775f7b398fdae7db57ae0dcd6b75d05149b16a484b8ec580e4a2cce7e265ba1dc009fee6d60bc2a9a32af8f480da19f14f5bc0561b7251ab49a0bee906bdc20060d60ca48066720fc967276076f57be9b47fda025fc2291e02540b6e954e60609d31a2befbd05b6a67fcaa1ad15e42ae72e7bef038ecb751b61375cbba682b1de530a97dc12ca6bb", 0xe6}, {&(0x7f00000003c0)="db79618c541e3a5136a96526d9dd3487ee6ac23a68fd3d9ac694698553a4761df1b2921c37f1ab98baf6aa9098b279434544db7dcd6537940a03866c99001a0335bd83", 0x43}, {&(0x7f0000000780)="038c76b6f993676c71bcbbf985cc92befbb878a706210cfe97353d62f083127946a997a5702b1caf8a791e739e79ef393c29984c4b5937e4585bbd43e73ec4fd5375f5d9c2b45b86933a7fcbe61f3ebaa2e310fa7a4e9acbafc2efd7f098a348013350723723f4d3e4053f9abaf347d4a3324cfdd02aab7aee5ee3f31df8ebc10c8fc0fba3151de30d3d836a88c1b56480262915c61b40fee6be6b4f0016b2e94d4b1bb5733231a02cd5d4a832de03358b7fa2e873cf0c696bad21874ed33dc42829", 0xc2}, {&(0x7f0000000480)="808b0a667269", 0x6}, {&(0x7f00000004c0)="6a803d9c6aa60f0183c0aa45da03b55b5510473a656b7aac0fbac17cfc7ff382fa801fa21fd7186079e6caf6625bc25066cecc49a20856a38cbd724b1c64c99dad8ff9b0f575f0772707833cf3cc2c4e6f66e255de652c6a08b94410a3b5260dc5f9b9b5ccf0e19b86dfe661bc48a183", 0x70}, {&(0x7f0000000580)="3071ca762429e23c3194b5eee914829c05d6d851e7c2398a6b88f1d81c1e1f96b3a09869", 0x24}, {&(0x7f0000000940)="f90fd5be79fdb187db66b7e8ff6531aadcc25e305a011f36c5f4fb9e936e960a5240df3a5ae06f4a3d461e9ae27f6cccf0daa9f83bda0a67cfc972b7db46ffe3cacea1d00a1ed6bce7332227771cd55b982156aec1242d5ff6e19b15391e19ac2854b4de494e3314d0ccaa635b1649f231c7e95f4b4924ea5a40fc2cd02e03d8cc18db296416f886b2063535c7e5140b65db4d5bc2a2f5e13f10da0b8e6a168c5b95b1ca86df3697774a0bcfae1164db014dc57ef01dbce8e1305a5b9bc9555c8f72a6b607944cac01a9ea48ea7f0f7fd735c336d15efe709173ab7781794dff222ca597c66ee9", 0xe7}, {&(0x7f0000000040)="34f7360f2544e571ef178b56ac170e12bbcf6bb85333f545650ebe6bda19d70f5aa7ba752a0e1c3771c6418c77f831", 0x2f}], 0x9, &(0x7f0000000b00)=[@rthdr={{0x78, 0x29, 0x39, {0x6c, 0xc, 0x2, 0xf9, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @ipv4={'\x00', '\xff\xff', @empty}]}}}, @dstopts={{0x100, 0x29, 0x37, {0x33, 0x1c, '\x00', [@jumbo={0xc2, 0x4, 0xd4f}, @generic={0x4, 0x6b, "3fe598070b0b48d2d7341040a391c74d7878f95630b431722000aea5108356c247112ce9963868db3f16ff45d2cebba968f98541e13984803ac5d88061e1f84eda9bd4823a7c1cff9dc4a35ec07432114f391bca4d6a1d25ee5a9efa844cd6695c1f8a00a26a755c115ca5"}, @jumbo, @calipso={0x7, 0x20, {0x3, 0x6, 0x6a, 0x2ce, [0x4, 0x7ff, 0x2d8d7555]}}, @generic={0x7f, 0x47, "93c0d76fe812915d2dd1bd6fb6748611c22f6e1ebfec98d3078630adfe63eec39afafb1cdf43d781bb125f8dd127b66b21ad8f20fac572b08ca07bc8960a71c81077906b8e627e"}]}}}], 0x178}}], 0x5, 0x8080) sendmsg$inet6(r3, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffffffffc00, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 16:33:56 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:33:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x820000, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r5, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001140)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @loopback}}}], 0x20}}], 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@mcast2, 0x18, r8}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@remote, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) 16:33:56 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x5452, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:33:56 executing program 6: ftruncate(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:33:56 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:33:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:33:56 executing program 1: ftruncate(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:33:56 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000", 0x15}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 1997.294543] FAT-fs (loop0): invalid media value (0x00) [ 1997.295183] FAT-fs (loop0): Can't find a valid FAT filesystem 16:33:56 executing program 3: getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="00fe26f08c717172e91d11fcf1d03e37d0a9cdc52472aae6e9be2a52b04fa488404cabd15439f170e429dd5057d7d5db566fc9e4cab1128bce328ef54be2ac02ea82a613a077c2508b07638c2da855795a8523c7986a4979fc9300627bae481812a27b8f8d511a4dfbfc9680cf5c993b89f8efb3de820ef8e9bd306955000037976789cf995521a65b9192b2dde0498242f3042690688050b620e188a301b717bf204eb12a7fcd85332358a4e595f838fbe8e29ca7b0315e9f9e74ba8f08031384702d819754"], &(0x7f0000000340)=""/106, 0x6a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14, 0x1c0800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r3, &(0x7f0000000000), 0x5ac, 0x0, 0x0) 16:33:56 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x5460, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 1997.505010] nfs: Unknown parameter 'x' 16:33:57 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x40049409, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:33:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000003c000100000000000000000000000000050000000000000004000080b801fc8bf8ddbac142f6992887515365665124576362c0b58acca74542d298e85a75b95704c59d8ccbfba4e8e1545568"], 0x20}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000180)={0x24, @short}, 0x14) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x100800) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1997.782343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=12768 comm=syz-executor.3 16:33:57 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x40086602, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:33:57 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) [ 1997.903098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=12768 comm=syz-executor.3 16:33:57 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:33:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:33:57 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x673f, 0xf141, 0x1, &(0x7f0000000040)={[0x4]}, 0x8) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x81, 0x5, 0xfc, 0x0, 0x2, 0x82900, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x8, 0x7}, 0x18800, 0x4, 0xffffff12, 0x8, 0xfffffffffffffc94, 0xbd, 0x7, 0x0, 0x2, 0x0, 0x2}, r1, 0x1, 0xffffffffffffffff, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x6}}, 0x1c) 16:33:57 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) openat(0xffffffffffffff9c, 0x0, 0x80042, 0x0) io_setup(0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) io_submit(0x0, 0x5, &(0x7f0000000740)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x7fff, r1, &(0x7f0000000200)="5b0769a414b7fa59318735b8dc2d6d1488cd8467617e3ea4ee254130fedafc724395d5b823c220095fa0472d7cb446972590799f57e08b480dd814ec3c58accd45f91b8f124fa32633b70cf4740444967fe8ecbff4afcaf657839115d7cb6216389362638781964591a8397af6673ccde786d677dc61e81fa7ba7215231d9971752e967cac1238ac29e787793e35099a3cb88050ef46866468b4969255ccb0c385a2088002e8cb9f12f0ea15f199", 0xae, 0x3, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x75, r4, &(0x7f0000000780)="fb793085539c707c49c48276e0cf30376e553cb514bb74f0a337e4c5b7115a140299824c49307b7bb8641da0db698f480eabc6090ea8c17a24866713a0dd5cdcba53a578f66f876f08fff6bb664cb44433b0722e1b37bcb38af92ce6d3353986087b5dade96278eaa1a3bde402fb510ad599e35c8e364a81e1bac34d91ba772ee94213af0ec282e8bdb84d4d51d788ada60881e8c4f86046947490e4d0db53d8caba0b11df07537c3248ee9a845c5d1d70c9668c510b166f04b601210d431e8ae872e4121f828ab1d9a2c6d8343ca0e68f85582ed200"/237, 0xed, 0x7eb}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000000480)="5120b02c766511d6f5017631cade51bf95b91adee4783f2f0d886a278daee2de4de32b753cbed56a0d44a6eeaf88c6328e418ec2ff4387d586fb6f888bd47be04c6cb48251f027ddcb5ebe07fd69dc3ce9779432d0364d1dc1e31c0d3cafb2b0515302093d82d04f12d4f10eac9229d6e2c6dd7ae4d739ae6ace39e675730c", 0x7f, 0x300, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000540)="d06c63b0", 0x4, 0x9, 0x0, 0x2, r4}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f00000005c0)="da3195e1bb6d963583bb21c3085870a5cdaf74d4e3ea4198c68c1831770b2ae08e06e661dc4358b7debf341f819c2c7d4e480d3d989bb379eade4996a7b33b76b778625fb30a6718912216ae719d22942d2048c33134cee2e3906caf846a8fd2692b3759ccecdd0c34fe00631f7c12924df7136d05925c80ef5a3dc649d2ce86558e39dce9543c2537d08d7858a8c1f3f39c945cbaaafed210049886c15e08cb32535c3aa58070dc6466937b89e8d94a2a0587a2b469933b23480c44b8680598", 0xc0, 0xffffffffffff8c74, 0x0, 0x3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xd, 0x0, r5, &(0x7f00000006c0)="195573e51054b1e3506e1e98920f6259448f20d0f046d431ac83f034e3d693dadddd6c0b543a6ac75ac5e06372", 0x2d, 0x5, 0x0, 0x3, r2}]) io_submit(0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0]) ioctl$CDROMSEEK(r4, 0x5316, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xa001, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) sendfile(r6, r3, 0x0, 0x7ffffff9) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) openat(r7, &(0x7f0000000140)='./file1\x00', 0x102202, 0x102) 16:33:57 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x40087602, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:33:57 executing program 6: ftruncate(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:33:57 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x4020940d, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 1998.186600] nfs: Unknown parameter 'x' 16:33:57 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x80086601, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:33:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38373635383433343000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000a4d0099b099d46eeb5a6d2ef5e9d5ded010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000e0f4655fe1f4655fe1f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020e0f4655fe0f4655fe0f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="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"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffe1f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000012f00)) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000480)=""/211, 0xd3) 16:34:11 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) [ 2012.565892] device lo entered promiscuous mode 16:34:11 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x80087601, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:34:11 executing program 3: setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0xd4, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004804) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(0xffffffffffffffff, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r3, 0x0, &(0x7f0000000080)) r4 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) fallocate(r4, 0x4, 0x40, 0x94b) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in=@loopback, @in=@multicast1}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0x8}, 0x2, 0x0, 0x1004, 0x7, 0x0, 0xfffdffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) [ 2012.569775] device lo left promiscuous mode 16:34:11 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:34:11 executing program 1: ftruncate(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000140)={0x1, 0x9}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) lseek(r1, 0x0, 0x3) r2 = dup2(r1, r0) getpeername(r2, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000180)=0x80) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x100000001) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) 16:34:11 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:34:11 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000", 0x15}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 2012.580486] device lo entered promiscuous mode [ 2012.582896] device lo left promiscuous mode 16:34:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:34:11 executing program 3: rename(0x0, &(0x7f0000000700)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x40081, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"}) creat(&(0x7f0000000040)='./file0\x00', 0x40) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x8, 0x3, 0x7}, 0x88}}, 0x18) preadv2(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000380)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x17) unshare(0x48020200) [ 2012.641083] FAT-fs (loop0): invalid media value (0x00) [ 2012.641688] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2012.778970] nfs: Unknown parameter 'x' 16:34:26 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f8", 0x16}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:34:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:34:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000001c0)={0x0, 0x0, [0x1f, 0xaaa, 0x100000000, 0xbbc, 0x9, 0x1]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r2 = dup(0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x8, 0x8, 0x2, 0x0, 0x58, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1f}, 0x48845, 0x1, 0x4, 0x5, 0xffffffff, 0x2, 0x800, 0x0, 0x80000000}, 0x0, 0x6, r4, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x8000001e}) acct(&(0x7f00000000c0)='./file0\x00') unshare(0x48020200) 16:34:26 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0045878, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:34:26 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:34:26 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:34:26 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) [ 2026.935435] FAT-fs (loop0): bogus number of FAT sectors [ 2026.936685] FAT-fs (loop0): Can't find a valid FAT filesystem 16:34:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x2, 0x400, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x15, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f83265549b"]}]}, 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r1, @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b0e73697000060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000000000000000000000008000900090000001c00038008000300000000000800010001000000080001000200000008000400200000004c000280080006000300000005000d00010000000800050005001c283171ff89dec201000800070086000000080009007c000000080004000900000006000f0002000078e00006000b000a00"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000004", @ANYRES16=r2, @ANYBLOB="00012dbd7000fcdbdf250a0000000c00028005000d0000000000200001801400030000000000000000000000000000000000060002002f00000008000600020000000c000380060004004008000008000600cd000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd0300"/18, @ANYRES32=r3, @ANYBLOB="0c0099000700000032000000050019010c000000050018012500000008009f0003000000"], 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x20004000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) unshare(0x48020200) [ 2026.999014] nfs: Unknown parameter 'x' [ 2027.026960] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2027.032618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12883 comm=syz-executor.3 16:34:26 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0045878, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2027.105789] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2027.112984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12883 comm=syz-executor.3 16:34:26 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:34:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$inet(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = openat$cgroup_int(r2, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0x8064}, {r4, 0x400}, {r5, 0x100}], 0x3, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0xbb]}, 0x8) r6 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000000a004e2300000007fe8000000000000000000000000000aaffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80000000000000000000095a01b6895a9bb2421474c00000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000040000000a004e2200000003fe88000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24fffffffefc020000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ffffff0000000000000000000000000000000000000068f32f928440905a9d7fbf5e0a004e2000000101fc01000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000f0fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a8caea61efd7b13bef9de6340a1bec311a2c1fe74390ef63ec95bddcef000b12f1158cc9758e3cfee403fbeb911e911b0374c"], 0x290) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/39, 0x35, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 16:34:26 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0189436, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2027.354033] nfs: Unknown parameter 'x' [ 2027.362972] Process accounting resumed 16:34:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000001c0)={0x0, 0x0, [0x1f, 0xaaa, 0x100000000, 0xbbc, 0x9, 0x1]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r2 = dup(0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x8, 0x8, 0x2, 0x0, 0x58, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1f}, 0x48845, 0x1, 0x4, 0x5, 0xffffffff, 0x2, 0x800, 0x0, 0x80000000}, 0x0, 0x6, r4, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x8000001e}) acct(&(0x7f00000000c0)='./file0\x00') unshare(0x48020200) 16:34:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$inet(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = openat$cgroup_int(r2, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0x8064}, {r4, 0x400}, {r5, 0x100}], 0x3, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0xbb]}, 0x8) r6 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x290) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/39, 0x35, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 16:34:26 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:34:26 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) [ 2027.715840] nfs: Unknown parameter 'x' [ 2027.813082] Process accounting resumed 16:34:42 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc020660b, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:34:42 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:34:42 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:34:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:34:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$inet(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = openat$cgroup_int(r2, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0x8064}, {r4, 0x400}, {r5, 0x100}], 0x3, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0xbb]}, 0x8) r6 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x290) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/39, 0x35, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 16:34:42 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:34:42 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f8", 0x16}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:34:42 executing program 3: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) [ 2043.462259] FAT-fs (loop0): bogus number of FAT sectors [ 2043.463235] FAT-fs (loop0): Can't find a valid FAT filesystem 16:34:42 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481223, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2043.551981] nfs: Unknown parameter 'x' 16:34:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000001c0)={0x0, 0x0, [0x1f, 0xaaa, 0x100000000, 0xbbc, 0x9, 0x1]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r2 = dup(0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x8, 0x8, 0x2, 0x0, 0x58, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1f}, 0x48845, 0x1, 0x4, 0x5, 0xffffffff, 0x2, 0x800, 0x0, 0x80000000}, 0x0, 0x6, r4, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x8000001e}) acct(&(0x7f00000000c0)='./file0\x00') unshare(0x48020200) 16:34:43 executing program 3: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:34:43 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481225, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:34:43 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:34:43 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:34:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:34:43 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) [ 2044.152887] nfs: Unknown parameter 'x' 16:34:43 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(0x0, r3) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2aeeffffffffffffff0006007ef05323e4652fbfddbbaae54cf411b3058f0447a3667293f1ad68f72465733c4c9a2e638ecc11b158551f0ffd35689cd1059fe03cf69fc6719c2f21c7a047c9cdf8327d8841828cf78c73959c445d814fb7629234166b420432a3e2145deab29b6eff719d1addcfea494a6d41d3c2d20db6000675729a21cbba43dae3f2560f727dc66574c5dfe2e2f92302f4b56929162b091a07d15b220fa1de1b917052a9a359241e401f009444b255f00df8cea81bcdd1bcdd4d22c681d4b1fa93298324a462407f2f9d618886bbd685533b0ba8c3875d7c1724b6a981cd", @ANYRESOCT=r0, @ANYBLOB="0a00e800ffffffffffff00000800050006000000"], 0x30}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r10, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0xd0) r11 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x6, 0x80, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22}, 0x0, 0x0, r11, 0x0) 16:34:43 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc048122a, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:34:43 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) [ 2044.321926] device lo entered promiscuous mode [ 2044.328399] device lo left promiscuous mode [ 2044.376093] nfs: Unknown parameter 'x' 16:34:43 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc048122b, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:34:43 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481225, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2044.443633] Process accounting resumed 16:34:43 executing program 1: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x66, 0x1004, 0x5, 0x76, 0x7, r0}) 16:34:44 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481225, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:34:44 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc048122d, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:34:44 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc048122b, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:34:44 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:34:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:34:44 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:34:44 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f8", 0x16}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 2044.833882] FAT-fs (loop0): bogus number of FAT sectors [ 2044.834572] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2044.942764] nfs: Unknown parameter 'x' 16:34:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) readv(r0, &(0x7f0000001780)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x440000, 0x0) 16:34:59 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:34:59 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:34:59 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:34:59 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc048122e, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:34:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:34:59 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:34:59 executing program 1: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:34:59 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d7463702c706b72743d30783030303030303030303030300efb0c5f5c54284a8837303030302c"]) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xf88c0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x1, 0x0, 0x0, 'queue1\x00', 0x3}) r2 = syz_io_uring_setup(0xbdb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x163, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) r3 = fork() pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x128}, {0xffffffffffffffff, 0x104}, {r0}, {0xffffffffffffffff, 0x6080}, {r2, 0x9210}, {r2, 0x4440}, {r4, 0x6480}], 0x7, &(0x7f00000003c0), &(0x7f0000000400), 0x8) r5 = fork() kcmp(r3, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) gettid() [ 2060.492684] nfs: Unknown parameter 'x' [ 2060.515024] 9pnet: p9_fd_create_tcp (13083): problem connecting socket to 127.0.0.1 16:34:59 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc048122f, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2060.702217] 9pnet: p9_fd_create_tcp (13091): problem connecting socket to 127.0.0.1 16:35:00 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:35:00 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481230, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:35:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:35:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d2420100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32303232303739373400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040000c00000000000000d3f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d3f4655fd3f4655fd3f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011700)="20000000945343359453433500000000d3f4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030000000", 0x40, 0x2200}, {&(0x7f0000011900)="20000000000000000000000000000000d3f4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011a00)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2300}, {&(0x7f0000011b00)="20000000000000000000000000000000d3f4655f00"/32, 0x20, 0x2380}, {&(0x7f0000011c00)="c041000000400000d3f4655fd3f4655fd3f4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2a00}, {&(0x7f0000011d00)="20000000000000000000000000000000d3f4655f00"/32, 0x20, 0x2a7e}, {&(0x7f0000011e00)="ed41000000080000d4f4655fd4f4655fd4f4655f00000000000002004000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000d6b05c9300000000000000000000000000000000000000000000000020000000945343359453433594534335d4f4655f945343350000000000000000", 0xa0, 0x2b00}, {&(0x7f0000011f00)="ed8100001a040000d4f4655fd4f4655fd4f4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000000da710e000000000000000000000000000000000000000000000000020000000945343359453433594534335d4f4655f945343350000000000000000", 0xa0, 0x2c00}, {&(0x7f0000012000)="ffa1000026000000d4f4655fd4f4655fd4f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3230323230373937342f66696c65302f66696c653000000000000000000000000000000000000000000000d6e8afef00000000000000000000000000000000000000000000000020000000945343359453433594534335d4f4655f945343350000000000000000", 0xa0, 0x2d00}, {&(0x7f0000012100)="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", 0x1a0, 0x2e00}, {&(0x7f0000012300)="ed81000064000000d4f4655fd4f4655fd4f4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000090000000000000000000000000000000000000000000000000000000000000000000000000000000d9d9ad0100000000000000000000000000000000000000000000000020000000945343359453433594534335d4f4655f945343350000000000000000", 0xa0, 0x3000}, {&(0x7f0000012400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012500)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x1}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x18400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x18800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x18c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x19000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x19400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x20400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x21400}, {&(0x7f0000013900)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000013f00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000014000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x48000}], 0x0, &(0x7f0000014100)) 16:35:00 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r2) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 16:35:00 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481258, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:35:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') readv(r0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) r1 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000200)={0x6, 0x20, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) kcmp(r1, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) fsmount(r3, 0x1, 0xa) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x0, @tick, 0x1f, {0x1f, 0x9d}, 0x4, 0x0, 0x6d}) [ 2061.338917] nfs: Unknown parameter 'x' 16:35:00 executing program 1: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:35:16 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481263, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:35:16 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:35:16 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481258, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:35:16 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r2) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 16:35:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:35:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4089, 0xff9}], 0x1) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7, 0x4, 0xff, 0x3, 0x0, 0x40, 0x20c1a, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc6, 0x6, @perf_config_ext={0x1, 0x7ff}, 0x12100, 0xfffffffffffffe00, 0x8001, 0x3, 0x5, 0x1, 0x9, 0x0, 0x9, 0x0, 0x2}, r2, 0x7, r0, 0x1) 16:35:16 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:35:16 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) [ 2077.661917] nfs: Unknown parameter 'x' 16:35:17 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x1b}, r1}, 0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private1, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000000280)=0xe8) write$eventfd(0xffffffffffffffff, &(0x7f00000002c0)=0x2, 0x8) syz_io_uring_setup(0x62a1, &(0x7f00000004c0)={0x0, 0x2faa, 0x10, 0x0, 0x287}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) write$hidraw(0xffffffffffffffff, &(0x7f0000000440)="aff9bf1f9e543718743e39a2435abf403bd20ce33684e37328e76ab4e7b83f7b1c3293bc529e4cf4ad70c8ce397c5b1a49da974ba2c779749de0be71a33958d065cf7627cfa9a8066b550e38f9ac5f8463", 0x51) r2 = accept4$inet(r0, &(0x7f0000000580)={0x2, 0x0, @empty}, &(0x7f00000005c0)=0x10, 0x800) accept4$inet(r2, 0x0, &(0x7f0000000600), 0x0) accept$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev}, &(0x7f0000000680)=0x10) io_uring_setup(0x6227, &(0x7f00000008c0)={0x0, 0x3c5f, 0x2, 0x1, 0x3ac}) 16:35:17 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f0000000280)=ANY=[@ANYBLOB="00fb1cbe0205e94a778c76633ed225f974ca1274fbf12f01e5aa739aaa"], 0x1c, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140), 0x3) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) close_range(0xffffffffffffffff, r2, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0) open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x100) timerfd_create(0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) finit_module(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x1) unshare(0x48020200) 16:35:34 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481264, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:35:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:35:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x8, 0x70bd2a, 0x25dfdbf9, {0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x400a0}, 0x20000000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000) 16:35:34 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r2) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 16:35:34 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:35:34 executing program 3: perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x6f, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x48a43, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x0, 0x81, 0x7f, 0xa82, 0x2, 0x3, 0x9, 0x156, 0x40, 0x35f, 0x3f, 0x0, 0x38, 0x2, 0x7, 0x5e30, 0x40}, [{0x70000000, 0x8000, 0x5, 0x0, 0x7, 0x8001, 0x5c, 0xffff}, {0x3, 0x0, 0x9, 0x3, 0x8001, 0x4, 0x1000, 0x8dc3}], "", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5b0) setpriority(0x1, 0x0, 0x80) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000150a05008000000000000000040900020073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24004015}, 0x24000000) r2 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 16:35:34 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:35:34 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:35:34 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x8000000000000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000240)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="23210000080900009302ce74748b3277b6527bb5f63edb50b141f9fb5e18770e6cefd19c17e059915cfd5379d56b32026a7a09b987cf1564e97d07f449a259b83928d11f87934bd30764faad45d93601f692418695176a6cbb105c8e3bb998a3c642326d887db8eeb7ff6ce016da32b2ed5def2bad18bd547f4ed83589c33cc2764a1b15b41d3db476a1ffffffffffffff905bb6c88f2bf899d145863a8f087bac5cd73ddeed2ee94be8bdb96ba13b4e4f1346a2cd392d3807c7741ae180132d1457b072cdeb1689d24e256190ce4ee5e2617baa1c23cdb0cc2429729676b26d4b8bff4657a38c1d676919f4a0bba2461f449f60c4db622891"], 0x10) fallocate(r1, 0x3, 0x0, 0x18000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup2(r3, r2) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@rc, &(0x7f00000000c0)=0x80) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000180)=ANY=[@ANYBLOB="6a75a83ec0bb0850db0b56149a2b95cb4ff840981e", @ANYRES16]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0xcc82, 0x0, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r4, 0x0, 0x7ffffff9) [ 2095.546928] nfs: Unknown parameter 'x' 16:35:34 executing program 3: r0 = creat(&(0x7f0000000180)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xf0) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/209) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$getflags(r1, 0x3) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r3) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x7f) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 16:35:35 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481269, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:35:35 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc048126c, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:35:35 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) socket$inet(0x2, 0x6, 0x7f) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x108) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000380)={'mangle\x00', 0x0, [0x7, 0x4, 0x1, 0x1d, 0x1]}, &(0x7f0000000000)=0x54) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_io_uring_setup(0x1, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x80000, 0x97}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000480), &(0x7f0000000100)) sendmsg$nl_generic(r3, &(0x7f0000001700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000016c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e01100001900200027bd7000fcdbdf251d0000000500570000000000ca0045003680f7052713f87b733d2bb49e95ce88f8d763af3b47b61d05dfd81ec053c43ba5e2718391ede8b266bfa83379c841a972f83a7ebbb8bf46eb6c601d9f2d4f6954e961ccbeda2c00f1b192791ae150da49b085e55bc27ffd7a587be63df4bf35f7069f4ea673a33986df62902c2918a7e174fda359d80ec604966bb1ff1aba4267a74f5519048a685f15c2c5b898a9e99be5ec02bae9cd5cc2851c7d9f214ed1514ad0316b18dacb0feda7c2d0823ef99549faf1d5439ff56d2928038d0df7d0ec870e31a85a0000f5102580a4f104d89daab4cbe9c81439aa4feb9f578bcd5f3e2a3761c43cfad7dbb72a347d50955f89eaea272f021cb7f7687c063634fcdac13a6ac6446c187c53f6ba21dadbdf05acabb18c6dd1f37afb5dbcb23013fffeb7be5f788b1e4cd33ab3cceae043aaf14beeb195c343312cb5f67132de3fff982593861639149ee772ec604a70afa7ad9f0bbd047407a924cc416dd7bcb876bf5fdc36e84fb6f640e73c9eccfde0061ebbf79b901b3c88071ca70540a83b4cc7d953d4cf8bddfa40e715d329f2150a1dcaccd02294439da4d3fca93e18c580ec8c43df4a8f7e0d1a13626a265bb1e6a92e938f943ee219dfe4394077ff1d1db7fdd48e271bc5ecc6eeaaa96c23b8325f9640d6b3c87ec780118f02701ffdcf905cba281b3bc90e996868bb993ab9d4aaebffae680afe254733c2f83ea8e9bd6e63578d9b7886f4a68f21ad2a3e80a5b9cf9b6cf2166bd173f280e1bba7a9f2015b6e9282860c0f693bd8ef911934ac61082c4f75c1246f3d65602700c6aa933f37d7bbf26df48d05af511461e94a4c5c1a3495dbd56769f1875d682a1bebcbbf5c9a4290a1fc2ff1a91e73d57b9e37fbf63b14f29c2258bf30b9e5926cdd642b14585ce6fb005626c0f9678238333a7073fdda474f2a49e192041e16fcce5c45eb03e41ee75558e1050097c2fa44082a1c3f4eb40521b3b0109affea6c889023bcbd5789fa53e2dc99500e7cd89088cfb7188fd08ec31542e0f33511cc397af8172eeac04eae6bc93bfa5d5e32a41a4d307d08f96c86993f04804286a82761977a6e3da8fe54f9171d7662eeacd111c0fc704f5d870095264eea660eba7a382fffaf630ac0473ec217e484b958525ebdeb2482cb2cd5f8afc1c6a64ecf446c0d2545262751784fa3bbb6f6868ab095ba6e3af472ead570933ce34def2324b413a1874d122fcc228acb633d6ed6c69d582d2d8ebd8bffb9e222bc1d718c3afeaf871588e82c4fef43a07364d7de5b8ffaee588a899bf171880400f8ffa7cbba50a9879cc2b93b8a935141abccb6088c61b9f2ac09eb28c3309dbd765621d77bf07ad3368e9b41bf7faef1a01da66323213ef8465ea5a2592384d59cd5552b64585b9512d0b7a3963f34f5fe52db98099d8c5bcc8f934a58a9e1007b49ea768364dcaf8b230dcef0c09bb666ecb43cb7f5d65c871d8c37947016d34a5c0cca890f958a976b2374c683d0f8568ac6edd9ce6fd6622c8987c74f521954a3b628e3ba77133fbe943b6f60177c5fe008a4ee570dd4ad302676c08266b3f59e70481ef912fbd56cf8de7bffb4e90e8c70c8dd84af0d79637d003f150bac1ee417c9c7f8c6bfb014c99b68f4bb114d37a5399b07dcd78b490c9b8d54a4c7742a81729ac7d1aa4af77d29f721da1861e14af428d5853f637129222c12f1ba6cc6b881c7e9fbfc834e051b196c4e1092f2f559d2712b8ec5d2b1f401ef3994840dfb0b8e38799bdf415ffcc8191cec57d409909cd75536dc61fa01852943520bfb2138ddf5a1707ab3e4ec2b5daa78c3758df2a0a0a42b639144c07e015a9aa1d375455f73b32de682716f142ec1254f23ec94994027245b262e38b6a677060922c341e5f1fd5a96b0daf551034ab0788748d1761338800cab442e7a74e15a0308076a3b68c54b7cac841f8dddf9c8a2a16f81091b6962595d6c8e04cae91bf8c806a9f7dc3412183aaabcc357f9906677367586b21d488bddeac24b29bb61601d7b1147c14c02fedcc25b3e490b9a4efeda172d0901c61c35cdeebd330527088406ff07c95cd252923d4cadf8762e28438d55daf41789b90f4ebefd3b286c821f2df3095a87b477f122a137a2639d6b63688b067d9104247a33d185cc1a14ecffa0c4e0455ff1f8959d8594d76aef1ec103ad9996e84e7a65dba71cc91a21cee54d08e21a73dabaffd203402df2fbb8483799669e6cfa8c8b24ca9399045dfba54f50ecf5d539f413cac577ea9c7558e5bbccdf714dc9e92afb329e3204c5f962fecb3653c2c3a3197934ee152b4846b744bf6011c54c6809e41990a4b14324ae6bf9909ea601cd7dd13312d5c240a5bfb6e07867b3963ea2c2720c16714e341d9f192ffec55c0620185a2362a61b4168c169695495fa33245282dea5fd0038be46f9104004d732151348ed721d14b4784ce384b6d7d636cf927d61b8a595133f0c544ea0b4c79e82abb6b3b94c76a42758c9fae53112fd838db0f6db6ad7c8edd50352d827dcfca1a42af35fe57bf636f3c8996684c26322b8ca978691d7b6d743ca9694926b9d7f80f5146bdaad14c33f207a0ea938ad6bf3d4f37ac17708b453c5d1e0394b3bec88ece4af855b320435eb28422bb19bee144feebb3da770791d98c180e2c87dce16279049aac83b87559f6cda7e2554e7daf83549b0cc1bbcfda432133fabcfd978f84851c9006710430539b8c30127fbb588da89dbcc6368009cd275c149471997137656c6e9d67cee152d687ed2074a4e93ce04bda92349d3fcd22e9f11a6b844e05fd76d9fa1a8404f147aa25e359fa31813d78d16ddbb2144c0b8c8ef10e18c56d55a490b0c4ab492076be93fa58845f6e06e1aac931f39a08a47e82feebfdfccf90175b8d6a205020c549e4411c990615ef887ed00fc36fa91f638d654a16e65c20eb5b91a432c1dbfae1e4b7beb3e7e313dd75ccc41b7487a01c2212acf0d2a7657172dda703f5a4363e55ec66fbd0db9fec4715ad2c91630873323473874a92659aa5b697427b72fa9cf5d2d587533f0aa6b79ae889038badfb4382527eb1a2628446814525564429e0dcb37f3a40c924cafc4a6b6612ffa0ff1b715f1c02d7276ff34b21f35df0e203faa73434c36457b1cbf4cd4482468ef2c22eb817f3da8f94d04616808330e977b081a8ad1d484101b924e0da1d0eebb7b6fdb06d3b6eed61833d5939c99ab744f0792d254986d46a97d29ac64e490ccc8f05fbee2685987895b155489a3f420421b544141bd71f601ae771d9b1542112cd15925127dd37c0c3b664de0bab168cc6ea6e71ecf1e68a3c8f926987bbd7476bcce26a2f1387db37c84250bb22eab14c0a4b77f0305e02fdf1aaf7491326a3fe1006a9ab06c9f79bba84e9b637cb5499745ff020b2fb7306033ac3fbe4bc2156cdcae4e8a9ecb577f3deda80b47641861a418fbdf94e79f4c1c681827457cea49b8bfe088bb18a7e1c9dca1897226c18da62941afe8af1e70aecfb7f760f0e8bc788a6adc80f0435847a273b4fee715810ac57ab58758c668c05e0d3b474d434ae1938319264d1182a39112db88b1bca36b918fae3fcaa27c9bd52f6e0f6cbd972129e6caef33307ff917c1914c0f9fd03bae51b16d1630ada5e9515cd19431e9d39821a195df95a356b76db090e56f6171fd3d25556192e9f78791a1727a58dc50333ef42a6774af12aeb99fe7a7b31b44141c8260522a469cbec595fa16db027f838379047b9906821fb280e5d0ae50aa90ccf9a9f48c79b7de482c59b58c9e38b465c51ae4714aa460cafe6c6a0e90571b2d7fc7762824c1f536220c09854331b1427237ac1579bd5bc25b8a2adab0b875cc9a86808a02b392f3d210a64908c61ad26708930b88e4d586e7a02f4d1615eebd5b87eb6af1e0d7db2d94b31f3aa8f6e0a0ddcbc1dabb15c34fda55197a3e869f1565d511b83805c10dea7a69d2952cbe01243ffe549bd0b53d8e4e1731da6d602c460cf37d53413b2a8178318a52baebfaabba1b9116ad1c5ff44c9c4c74a56da6b2b071e4b0f8885b6b0b544a6844b32cfc6e94677d93213d15c181eaafa4ccab3bd3e59d5b77934a6cb09713da277c7509eaae409b2561bab53c312f44c141f56f062910231e35f49111a20875bd0ea075b530f2c79898f995252433865784842dbdad6a713cdb8873e226ddb6f90d66fd7af2ac4acda764ce21ca29fab1b44853678c302932edf4c5c90bda1b52253939003b32504ef570875a3d8f08c826021e38f33e352393d2a9b69b2ac563785c26df6ba8df89e22292ac15c353a4d574887d18dd42d43c08ccc49fd1391f0e5b2e0db7da94da8e3333ab080ffbd6dba7b143afad2453c7152e770a90bc444ae01c8a643a20c7f63a1196fa3b50cc6f72527123dcf023e964ac37977de0f7be93f3c3321575c3d3110d28afc0dbf7f2f3f69fea303dac0130aad358a314956fbcdf6c52deb429ec81334ee72505c76663d6d405a980c891cec5d901731306b3e36401089f277a58390b73ed027466c44baeeba26dc0182adbc32f27fd6bf1d37c6db828c18f6b1062a17ba9244aad7e2ab9c3ec6d0e50dbb2d2c5741ab66be74bce2dc67af311997b4f2514f975446e8e40e79083989fff22003db746f346f3e23fd34e032d9d15acef2c17ef467495170d209df7d639042fc732a674574606b995dcb8106a6d87ac9fd97db4ce2ace3de33abccc9382ab3a68447c8d1f7f799fd1cc877b4512fbf58aed31d1a231316c4d3e134bdef2b373c3bac6b2d504800d2469057c6b1a36d1be8c76fa44ec9af81732f5f38601f2ea907ec104331175c1b5c8d2e9a620f04889588a96d38dad2683a4a8ccae01464c7580ea3399aa350c158746e9597850ec3ad12e4bdb57b9dfdfd296701cba9b954ecdf5d8b21932708782d03fc837ab744873c73ad8936e49865867685db4ccca18deadd9680bee739abfecfd912c85d044e4677d90737987c1845db9418baa9310754a4780cdc8f2bcfe94faf4d47a8795e26494fdec5359e0bac5fb4efa447a7a10f640eaf829dd6a74adcd200826f9f5903e8190aa6c40f39517ea61b963f834fa160dbd9650d05c1c2efb01b7167ee31fe0a75283f7d5c6b0372f5bcef51d873603f4244707a5f4ca56f18db22ebb3f875997ebf513dc3b3220e01045a96904699485f61bc841aa5be1a218d9c90719088952c0775b56de3f2d0d096d172a5a2052c6e79ffc2079f4c784bcd1eaabf9ad1768139168c8ffd9ba5c5f1d4b62f96381ef27d24aadd67ebdc7adc9bbcc40212699ed4788ee4ff3d5aff4e6408bce53f499fc046b58d5c1f0ba924a3600190004b2a1ce6fc548a0696cc522fb4baa45587b834357dd89ca2485339ac4b506fe77bfad441977dd5e6b54131fb03eb7bce0cf86d069c111087c55665e5de6f5243540ee6822e3a156e2bc1dfbbbf9bf6aaaf5ec77f63a6eb9100bfbfa35b21d48f38c512b2591b7ec9fc69a00d916bb9b66d3ed456637a815b464cc707ae5499e264969ba5e14c691c22d2b92e2f6eee6fcb1def2aea8b8f3438b4d98f14843821e62afc458ab7c66277524c413324c9695a9d13a172d2265bb72200562a1188bf2f5f7180c4a5f8d40a6766f45ae65bf5fed6c939e8d320555257696ee0aee6f5ec5dbc2cb61dfcb7243c8a0b44c4b012659aa62083eb722dc7bd0e42ecae459e9c726aa2beffc7e8d9ebcd996ac8003349d5cd6da844c8e8ac2e5160f361cd89133d33d2336af203a403fcf301383fcd729d8e0b5a0f9ae9e348cbf94f8b27ef7b863f419ef197871d909332975c4a2fd9d4cdddcbda38e5473e8a3cc00de26e73a6965ffb8bfcc725196a68d4627688f7359191de1904ce7949a15886ef91f3063bf409f46f26e10035e11eaf5f53fdf10419398c889735fe235518cd7862d678c5b4a32a13ed0dea445b1902643598fdbf90095b5c8aa62282c3b42f7512c3de82cc810ddde5a9516411522ead81b80173dfebd0015b57fce58a52b8435be564be27f70dac052e5656b1f00f37382f554e1a30376bcc16d8a1d91a8cd54d453e7d006b8e77de52fe6e9e70f89eb371fd06723cba4e4c4024970a7858f5a976c482fc59fda5d06eae9e0317809999ec8b9061deaf9b56de7e80afa9b7034a995c47161cf0493ce5e921bcc4a624ca618f4bdcf4cefb10a33042340334276c9549e6cbba2245d0cfb1996e4ee764536a26a7ec0438982e351a6ec5b5b94459f273db87391fb3ffba1fab44b53402bd9efb6342902b04e6ec37761bbf7e0192b80cd796477391f6c307cdef14b4b41312354045285a05b4edbda9e7a63ae6e37e6e1061e924da26870fd290552fe93b7ff2b2e9200b9f292be6187bcfa6c000000"], 0x11e0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000440)={0x1, 0x1, 0x3, 0x5540, 0x1, [0xff, 0x4, 0x7f]}) write$sndseq(r2, &(0x7f0000000400)=[{0xb6, 0xc1, 0x1, 0x0, @time={0x100, 0xeb}, {0x0, 0x1}, {0x59, 0xbc}, @addr={0x6, 0x7}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000002c0)={0x10000, 0x8, 0x0, 'queue0\x00', 0x200}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) fork() r5 = fork() r6 = fork() kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) [ 2096.102648] audit: type=1400 audit(1686674135.440:44): avc: denied { create } for pid=13237 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 16:35:35 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc048126f, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:35:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:35:35 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:35:35 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x157) clock_gettime(0x0, &(0x7f0000004540)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000004340)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000004c0)=""/218, 0xda}, {&(0x7f00000005c0)=""/54, 0x36}, {&(0x7f0000000600)=""/100, 0x64}, {&(0x7f0000000680)=""/47, 0x2f}], 0x5, &(0x7f0000000740)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/140, 0x8c}, {&(0x7f0000000900)=""/123, 0x7b}, {&(0x7f0000000980)=""/169, 0xa9}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x4}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/32, 0x20}, {&(0x7f0000000b80)=""/226, 0xe2}, {&(0x7f0000000c80)=""/94, 0x5e}, {&(0x7f0000000d00)=""/72, 0x48}, {&(0x7f0000000d80)=""/152, 0x98}], 0x6, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000001000)=@abs, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001080)=""/3, 0x3}, {&(0x7f00000010c0)=""/47, 0x2f}, {&(0x7f0000001100)=""/38, 0x26}, {&(0x7f0000001140)=""/56, 0x38}, {&(0x7f0000001180)=""/144, 0x90}, {&(0x7f0000001240)=""/65, 0x41}, {&(0x7f0000001380)=""/188, 0xbc}], 0x7, &(0x7f0000001440)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/39, 0x27}, {&(0x7f00000015c0)=""/214, 0xd6}, {&(0x7f00000016c0)=""/41, 0x29}, {&(0x7f0000001700)=""/109, 0x6d}, {&(0x7f0000001780)=""/83, 0x53}, {&(0x7f0000001800)=""/77, 0x4d}, {&(0x7f0000001880)=""/64, 0x40}, {&(0x7f00000018c0)=""/128, 0x80}, {&(0x7f0000001940)=""/49, 0x31}, {&(0x7f0000001980)=""/180, 0xb4}], 0xa}}, {{&(0x7f0000001b00), 0x6e, &(0x7f0000003080)=[{&(0x7f0000001b80)=""/223, 0xdf}, {&(0x7f0000001c80)=""/225, 0xe1}, {&(0x7f0000002e00)=""/110, 0x6e}, {&(0x7f0000002e80)=""/233, 0xe9}, {&(0x7f0000002f80)=""/212, 0xd4}], 0x5}}, {{&(0x7f0000003100), 0x6e, &(0x7f0000003180), 0x0, &(0x7f00000031c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x8, 0x40000003, &(0x7f0000004580)={r2, r3+10000000}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105e, 0x86010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x7f}, 0x50064, 0x10000, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x800}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x0, 0x0) copy_file_range(r5, &(0x7f00000001c0), r1, &(0x7f0000000280)=0x10000, 0xc3a, 0x0) fstatfs(r5, &(0x7f00000002c0)=""/176) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0xfdef) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x20000, &(0x7f0000000380)={'trans=virtio,', {[{@nodevmap}, {@cache_loose}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, ':'}}, {@cache_loose}, {@fscache}, {@privport}, {@cache_none}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_hash}]}}) fallocate(r6, 0x3, 0x0, 0x8000) 16:35:35 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481270, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2096.483100] nfs: Unknown parameter 'x' 16:35:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)="96", 0x80000}], 0x1}}], 0x1, 0x4054) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) 16:35:35 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x90, 0x0, 0x0, 0x0, 0x0, 0x6d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000400)={0x87, 0x940, 0x0, 'queue1\x00', 0x7}) openat$bsg(0xffffffffffffff9c, 0x0, 0x200600, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4890}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x1, 0x0, 0x800, 0x2, 0xa0}, 0x3}) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000200)={0x1ff, 0x8, 0x2efc, 0x40, 0x80, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) [ 2096.692315] ALSA: seq fatal error: cannot create timer (-22) [ 2096.763655] ALSA: seq fatal error: cannot create timer (-22) 16:35:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:35:50 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:35:50 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481275, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:35:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)="96", 0x80000}], 0x1}}], 0x1, 0x4054) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) 16:35:50 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:35:50 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:35:50 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:35:50 executing program 1: creat(0x0, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x24081, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="f705636e78d7fe56dc785801c1639135f64ee7b44ea8862a6e57b093fb04375b3e0f873e7d29c115a4c23c962b433c021ece0cc82189b2e928912c82fb", 0x3d, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9, 0x4, 0x6, 0xfd, 0x0, 0x2, 0x20201, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000240), 0x1}, 0x40000, 0x1000, 0x0, 0x7, 0xffff, 0x0, 0x94e, 0x0, 0x6, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x6817f38971100a5c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 16:35:50 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) [ 2111.729003] nfs: Unknown parameter 'x' 16:36:08 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:36:08 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x523eab771006a858, 0x0}, 0x0, 0x8, &(0x7f0000000100)) open(0x0, 0x20000, 0x20) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) fcntl$getflags(r0, 0x40a) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x0) 16:36:08 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000001c0)="1238e3133137b850d0cd7682ef6e6fe1793144892db4ee6bbf709f3e991cf5c4119a1de71ce32987a386a1399a184d93d1f654d0805a27de4dd8f591d5f4e3c6ef1e96fa4aaeca6af0ad175e74c15d5ce948cb484024210d67f9c372b3284c32eca555985720fdee4da2485ec2213d621795d187b53a9365b0b14565f75e0b60f29cdc09d90c685f48c2e49316237c3ad35ed8cc5661fc1622e2eda5f35c949aff41ca4974fe2db17612f5ccb55129a45358e708af994e8ec6fbc331132af3a50e348319dde4bd4ec7441c8a17845861c90a800e2a7cb7390f77947182538851d609c1fa7b2e1ed0740a82366b5c9feea06c743f5beb76f5f410b85d92519784") socket$inet_icmp(0x2, 0x2, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000006000), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x7, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000a80)=@disckey={0x2, 0x2, "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"}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002480), 0x800, 0x0) dup2(r2, r0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000080)={@local, 0x78, r6}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r6}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="a7a2f7f2a9bd2490751c6ede911cc9001d6e138aaadd302db9484406be239253aa4e191b29c047cdaa8a31bc8316c8ccaa55221ac773e0191faaf12a71286c8cba040a446ccda072802cc08b17fdaa40fb23ff229a89fc0b12b2744b1dc31bbf6ccdd9f22803961d7372b1f0ab670fa77d69649df8", 0x75}, {&(0x7f0000000140)="fcec122247d2bfcb7f703366f8aca722e48f83ac9d056ddea6", 0x19}], 0x2}}, {{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)="36614395f46915a67383e0b0f3c2", 0xe}, {&(0x7f0000000380)="8ba9a50467594ca81323c61897817fc1afe86e4b45477f483b8b32b2ce41308d9bbbc542d345e0611d6c5656331586d38266db06d5626a8ca30d", 0x3a}, {&(0x7f00000003c0)="986349474cb2f2967614219df49ed1af11a8aeb3a917907192", 0x19}, {&(0x7f0000000400)="6091a62f8b118ca38826e13a61ed72a65908704bfa04ab90acd6174f22f73eca265dc46a0edecda785d8b534874d7a7f27c38d76fd0e2037601493ea4dfd8d8d28bd748dcddcc0052a3e3a63b38c1f3f1e3b84b15766f2a0240d7a50e86e7e2860ec7af7d96b52ca1b2b35880bf4a38309286f980a483754536b27c31e05118eb5d486469d483ef1e383e674fd38fd91809b3c3668208fbccc20cc013deeebb9a4f444d7565f7abe60a87fc6", 0xac}, {&(0x7f00000004c0)="065ac35b53fdbaffa5be19da42f88174751601fa17f4eac33741ce14657e97ff2520c2c401000425f186", 0x2a}], 0x5}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="56c5a6427f9eaee85f93f1ef49d094bec877e941cfee4e9801d18cce64c8e5024f20ff507d4d0e27ab0dbb0b43115c61d311402eeed2f8feff8a6608b500749916a436e795923367c51b16b637e140ac08ce4da324fc931351ec892a7bc63b2d67f6a3bd1c18196f0ecb893b8d44f0374b4c4deaa93cbb5121f43e58d1c617c91d4e693dfa9b6cb0c3b760259e018aa8e8a8ba25820b27d6e1e3f7e0de2e0f6bf7e9418f42fb72a97dbff7e2c829", 0xae}, {&(0x7f0000000640)="564606725dd355ef8ec3e198fd5a971a7da74fe8dd6bad80e8df38cf16e013bc3a12b749074f26266f4ffc3069c623f814dc574010dc47787de55ab32be86d22be24dea67896603caeadba146eaf2a652d2592922919459259e3d895", 0x5c}], 0x2, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)="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", 0xfd}], 0x1, &(0x7f0000000880)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000900)="3711194832678e82f20ac27fad6b93763dc5aa5cd19a8bb16daa5787e086846cf4edafa51825a3c474a696b057eb1d51742d34bb3a49b5824dc607d1b8d4550745b15312e7c823a0b351cb88230273f277cf42aa7f2d298ac46109206aabf435dfcddf0be4a0bade8315087530f6750df0359d913d645d89d37f535038c59764049a38c194466886142cd1427c56b6d3419e474b378acf8c01be89ba8d509e8585f2d282c33c85805ac73cdc289922", 0xaf}, {&(0x7f00000009c0)="1b1fd7c831f627eaba5cb4f64a71b34f4a3bd78aff3ee5ba8cf6efe21122e1efaa82092ca94216f587af771ffa395807a605baa84da819ad6df14b6b1ecf67cf45982b37a794f7", 0x47}, {&(0x7f00000012c0)="c7bcbaf29acfeaf84b6cf7e3bcc2142150489e6d28b5f673fc5e50fca4b02fa1262502f3b3ec7264713f4ab5179acfe91a0aa0caff4ed1873a9ab194551b05a1010deb0fcfc92b3c50f79c2af009010ff7c24d4d454cea382cf3a42d681c0a4d5962ff6b886e2245360c7a111d4a418b7fe51aa9fa212b8bf3fabd9ccef1ed55e39a0a0f50bc2616b101e9", 0x8b}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f0000001380)="8031297905f50d4eaa1fdff4d0b618593ae4d5ec5c6c5dd9134561f487941c2cd49bfb6430d7f6b6ce41abc4dd2f7c75654a16269c1affc75ba67c87082255fc9ec486b850a040951e625a7fdfaad5cfc22f85f93d89432716227d1912425c", 0x5f}, {&(0x7f0000000a40)="549dd281a65108", 0x7}, {&(0x7f0000001400)="b92dc9693c695ac2a6141e7065269aefa1540344a78f093f35ce9efe52c33df0fcc64a5ae204a86a81b904efd5b804ad8d7578d4d9e168907a8624363e780ff3b0394bfb2355727d0f6bf9c0691812acff82856100a36221e83789f3897fc925e360a119d6bb7c304c58f6c40d36d981860bda1db958075da5ba3e1513391f5c3a76b2915239", 0x86}, {&(0x7f00000014c0)="443ec3c9a47eb34971e1d9721e1543f0e698c6dc6b71fcb69ce92e5fceb0d4f2daac569c7a38c82624f4d4213a7dc8acacf08825de30f41d09bd1cca0f2ff1d952d0b4eb3238658cac35a5bd461285a7f5b3e0dea85b765b5667d74b9c0004166aa212f418bdc518ce73ecf76f77c94bf5cc00a79968b54a5487aa28f9d0a834d6ee94793f9819b29db6164239b6d447b8714356e11ace6ef9fb9a73aa13b02e26462a0dc6013ffbdc6fccad7d5837e6df5aa695c8330b7da4a16a6a6f46fd62307e555e19265e9791f66075c179502849402e1e94fe5b5377202d", 0xdb}, {&(0x7f00000015c0)="5eec06c4e1645df399cf79b65375c5bad5627c2da8914c99cdb8ce488b4778957c14bd38ca06aa388656a0ac216e0c11bf872560ccb6362d49aa7801586ad3a46c59792e775fd9185ced25f4f70e49eb7e02d1b90be04e228cb227ef906fbb06c736e7e94ea3f0a0ca2609f93e003dc389391429e54bcba0f713bab832829e4fdc1ad38f7cc2823907e45db5e808751606f923b84c32d40d8e7c3028aed0cc5cd435a9cedf46088df04a67805c46245d00802a8cbdd5240475492e131b605960", 0xc0}], 0x9, &(0x7f0000001740)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}}, {{&(0x7f0000001780)=@pppoe={0x18, 0x0, {0x4, @empty, 'bond_slave_1\x00'}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001800)="ead1ac31fb327695c12a0671c812e1464dd9362d71bf0c197e098286cd2aa0e08b61fb32cacf84206547b9a655b984a0b057bcc7bc60d4f52c8a0416a5a24df06019d398571e2f3c8f666c036095fa274231a2226caf08100338f37642169ee9c0a19cd076e189212a81e6c9e5c9e32dcb2fd901fcccf48ca4e36cb7f728fffbbd8e3fcab38a7a37d6f995c742b9cfa8978c44a9e87718ac8274fdfd87c24dda41d99a4c782af49fce78d7f289ca7eea68f4942a5097e23fc2b2996be7347fefa4ce8c15b6b94908e1a67955c76a9c34b3710449e84d9509802631f3be76fdabf9", 0xe1}, {&(0x7f0000001900)="6c7516375251df78f00d8a90217fd4d06273de0747a2275e764649c479579a42375ffe79cef281b07d4a2e5eb05ebda3a173fbc28b8d2aad0a31c82c9ad4835f26426841ef6d9dfbc666", 0x4a}, {&(0x7f0000001980)="42773e6c80a4cbd8d68b10876f87f299acf23072d010031c72b512dda6e249cccfe68016b056161bea0d01cb94a077cce49b0d91b2ac6b40818e52906974357ab6021191f031b26a6baf045ee32437a5ec5d3197bc2be09368c5d115eac1ce7474e1b4906d60dcb404a12714dc878876e0178c227ef32c69ba3e03a8c049", 0x7e}, {&(0x7f0000001a00)="fb09588ae97cc52e458e29b7132862694cfffdf5043bb9f12af84500906c1598c69a5ea2374cda9bb25aa3eaf74e5ba2017404ef15cbf06a74d4e45e4124b4f34684872fff4f4c7c362b4391059d4bdab1566fb14ff8dad61eeae0af4e2e212e40a3b74d66f89c873fb4848bd8aa8fd80c8d70fe47316b5a6d71b6972112941a30ca838442e86c7b2a7320cadb8d81915dd797cdd3921358a475e4f09277b59046512ad5346072d7d7417a2487cc1a7800e1b38d461740215bd514addaed5003110dcc9ecb2b75c2085c7d3049009676e8cde0161197f9241104bde284d58f61b319916cb2576b987e6a7462db21", 0xee}, {&(0x7f0000001b00)="39d2c0a9ef43200702bd0e03c9", 0xd}, {&(0x7f0000001b40)="843b", 0x2}], 0x6, &(0x7f0000001c00)=[@mark={{0x14, 0x1, 0x24, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}], 0x78}}, {{&(0x7f0000001c80)=@xdp={0x2c, 0xa, r6, 0x19}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001d00)="c0dc802a354bc6d2c70ed6e6ee1812c31bc7ff711cb40dacde2ba1b5c176bd6be7b9a801", 0x24}, {&(0x7f0000001d40)="652bc906222fd3958df7a028b7e3b93bd34a75dd12ad6fa5f5ae762aaea79f14baa6", 0x22}, {&(0x7f0000001e00)="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", 0xfb}, {&(0x7f0000001f00)="ab757b44d95d3b3a8ea528fe50cce8bcfeaafd38571c1fc5ea1eb083b37036381ce800d4737f2f1650ae88a19c0f292f618a04a0f551d19a6e2b16ba4adf7e66e24a47809a0f3a789c9ca7e832705e5949b9c7d3a415339729286d637829134390ca78da59f2a62d52dba3bb2698655ef538e3ee29e43e9f310906a947ea222354f57846218232addfe8a029b2fb41ae587df5d1c47132708d1f7a80d2703f53be83b4f68560b74dad3832dd7e1d3a64cda0af5becee046e5a4ec6356afc", 0xbe}, {&(0x7f0000001fc0)="90d4bc0147f10e085c95bfb4295d275b855ede256ac3d850c28e9df14068bba02918af005612c3e07338d97511868268ebffb4ac000d1a96980a7059b2d16d52c922f4611bdb888c5ec268d2282f32f7d8e6ae699a3abb64c4f1efd017dbbfa3edc310fb73e31f3706d2bd2f919cd7edde5fbd405a39d81868b9ab06c7d83052915e992decf2f95252e4518d94545b7990b9ec7548856426433bbca2d878ce555e3aa3be8e48c70dea33c425dfd683cbcf7247139cc041ea647ff953cf0027d5d84040ea8906bcf806a0926a5707caa8d00cc050c35e6524d80199a579cc81f17995a520e02d57c2ba4afe", 0xeb}, {&(0x7f00000020c0)="ba5b58472f06d0882aef68ffd4d967486939c9ce817dd76feb096743a3a916758d8ae15b57328ad69e4c05dda3d2f212195da13ab7e44f33e0805d78e40cd0c3d363bb7d04e61bc73b2375adc3ca2caabc", 0x51}], 0x6, &(0x7f00000021c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}}], 0x7, 0x8000) 16:36:08 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:36:08 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481278, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:36:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:36:08 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:36:08 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:36:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0x8ffbf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x88) lseek(r1, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20902, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x43008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000000)=""/46) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000027c710ccc070031de950000000100", @ANYRES32=r3, @ANYBLOB="04000000000000002e2f66696c653100"]) r5 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x9101) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x29a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xffffffff, 0x800, 0x6, 0x5}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0x20002001}) r6 = openat$cgroup_freezer_state(r0, &(0x7f0000000240), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f00000002c0)={0x40002004}) sendfile(r1, r3, 0x0, 0x100000001) [ 2129.455072] nfs: Unknown parameter 'x' 16:36:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) pwritev2(r0, &(0x7f0000000040), 0x0, 0x10001, 0x0, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa52526141", 0x24, 0x1e0}, {&(0x7f0000010200)='\x00\x00\x00\x00rrAa', 0x8, 0x3e0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f00000002c0)=ANY=[]) 16:36:08 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:36:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(0x0, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:36:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) pidfd_send_signal(r1, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r2 = syz_io_uring_setup(0x15c, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/class/drm', 0x970c7917c8cb9e10, 0x2) dup(r2) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0xfdef) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r6, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r2, 0x2, 0x0, 0xa26, 0x2}, 0x401) r7 = socket$inet(0x2, 0x3, 0x40) sendmmsg$inet(r7, &(0x7f00000002c0)=[{{&(0x7f0000002740)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000007007f000001000000000000"], 0x18}}], 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="f2ffffff0100080018000010c0a9f801000000126a1baaccd316c5002a62345f986400f488e091500c0e5b33663045240cbc5a6569bb4f11778257e743f945601cda8f5c92581a0a8b6ada65151d679bf599cf46b70000383b76eb833c7f01e1aeaa3cdee706ae10cd4e5855ebe3aee7e22df10de7f811a6d0051bfe92bffde607e14da7", @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB='./file,\x00']) 16:36:25 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) [ 2146.143099] mac80211_hwsim hwsim10 wlan1: refused to change device tx_queue_len 16:36:25 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:36:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@dev}]}]}, 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x145, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x4}, 0xfdec) r4 = socket$inet(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/90, 0x5a}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)}], 0x5, 0x4, 0x6) sendmsg$nl_generic(r1, 0x0, 0x0) unshare(0x48020200) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x3fa, 0x100, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8011}, 0x40002) 16:36:25 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x2, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:36:25 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:36:25 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) [ 2146.241499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=13404 comm=syz-executor.1 [ 2146.310850] nfs: Unknown parameter 'x' 16:36:25 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2146.745209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=13404 comm=syz-executor.1 16:36:26 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:36:26 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:36:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000400)={0x0, 0x5, 0xc1}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@broadcast}]}, 0x24}}, 0x0) 16:36:26 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2147.048013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2147.103657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:36:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(0x0, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 2147.195774] nfs: Unknown parameter 'x' 16:36:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r4, &(0x7f0000000000)='clear_refs\x00') ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)=r4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x74, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{0x7e}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 16:36:26 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:36:26 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:36:44 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:36:44 executing program 1: ftruncate(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) syz_open_dev$hiddev(0x0, 0x3, 0x200200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0) 16:36:44 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:36:44 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xa, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:36:44 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:36:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(0x0, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:36:44 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:36:44 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x64440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005a900)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "71d160cf226a5c"}) r2 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r2, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000580)={r4, r3, "66811f68e0c440bba4bcf609493241b2512dbb6769ef1fdb21219441b9d2937255c56ea8b443729c72bc47cf6386f73b7ce88432ac6f99b63a93b89e7443b46a773671dded77dc24ba79debef1df5ffcd9e2222930e25f8b7e1873aae1853d7d55b7b3b64a43657809e8ea816519bc0c7323593b9e24a473e537db27b2a3ba9b30d958d7ff8d4867d47df99ca9958a196ce0c3c2c20e2a72af42aafe94c107a043d58527121953dfabf2d3ba6f3e7b2f09c47a4a55c3f5a3e68724037035d781567270a828be9bbe626a85ac9fe77bfa461f8903fcd4986a3dcc6fa6ec88fc174630b23dd02e3cf61e2117f78c9d99aa7daf6f8a7d6c4a01ad17f50051be2848", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005b900)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {0x0, r4}], 0xf8, "2f31ccd60cd9aa"}) r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r8, r7, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0xc00, 0x0) clone3(&(0x7f0000001e00)={0x1200400, &(0x7f00000019c0), &(0x7f0000001bc0), &(0x7f0000001b80), {0xc1}, &(0x7f0000001f00)=""/149, 0x95, &(0x7f0000001d00)=""/170, &(0x7f0000001dc0), 0x0, {r9}}, 0x58) fspick(r9, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc791bfdb0677e5a5}, 0xc669) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x800) [ 2165.500764] nfs: Unknown parameter 'x' 16:36:44 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x30, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:36:45 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r4}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\a', 0x1, r3) add_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="7a87fa02266e9213b92a93bac8e2b84a288de9b0924993f59696431c4bb7967f0f27b6ff2cab3581d86a0792036f7b12825f026c983e8e938c1f68fd38956ca0b21e2c610de78f8dd16c92b38fb156", 0x4f, r3) add_key(&(0x7f0000000540)='rxrpc\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="785c195d447e8fc1e331b1cdf0de59294262da3f2b6fafb7404850ddd0cfaa6e1d1a88dd9f7b37b10c495023f4e8c4903511a61a098e00668edbb63360446b644dcfc8befc795cce0618ec734415ff9f82438adae442f8d515c97ac4a8e74a5dd6a5370f4d81ebf97df3c32d9edf6cd9", 0x70, r0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x11, r5, 0xfffffffffffffffc, r0, 0x0) r6 = add_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000380)={r6, 0x40, 0x12}, 0x0, &(0x7f00000003c0)="62bd971a9347cd88085a6d53538145fb045619b47a8be3f5398045f613c345ed18a5b28e25f3a328e1040f286c31dd4b65280db683b950caeab817568977f6a9", &(0x7f0000000400)=""/18) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f00000004c0)={0x0, "7d9b2332171e40d6c1d3b717a0b0b0fc79a1aa2e9dde68cb47fd1615ee0fd68f0cef984ef968f925a237d90f2a06c6393a21ef6cfc1f6bd1bd0006ff513f04fe", 0x23}, 0x48, 0xfffffffffffffffd) 16:36:45 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r2) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 16:36:45 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x48, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:36:45 executing program 3: r0 = syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)) syz_mount_image$tmpfs(0x0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000d40)=[{&(0x7f0000000900)='|', 0x1, 0x268}, {0x0}, {&(0x7f0000000a40)='O', 0x1, 0x1000}, {&(0x7f0000000ac0)="98", 0x1}, {&(0x7f0000000b80)="1c", 0x1}, {&(0x7f0000000c80)='.', 0x1}], 0x42048, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000100"/17]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) [ 2165.866873] blktrace: Concurrent blktraces are not allowed on sg0 [ 2165.889409] nfs: Unknown parameter 'x' 16:36:45 executing program 1: ftruncate(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) syz_open_dev$hiddev(0x0, 0x3, 0x200200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0) 16:36:45 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:36:45 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4c, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:36:45 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:36:45 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1f, "77004a6efdff00", 0x3}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='oom_score\x00') ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 16:36:45 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:36:45 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x48, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:36:45 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5d, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x0) 16:37:00 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1122050, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}]}) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x140) 16:37:00 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:37:00 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:37:00 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r2) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 16:37:00 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x68, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:00 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:37:00 executing program 3: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000003c0)=0x7, 0x4) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010000000000000000620d7500000000000000000000000000000000000000000000000000cd000000000000000000000067d1a191d3ab680b49bd0d7f7fe1522257a0068ff001e0950269cea64afd0b74e5e19e", @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x4c}}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000000400)='./file0/../file0\x00', 0x119a00, 0x48) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000300)={0x2}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x8}}, 0x0, 0x20010, 0xffffffffffffffff, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000000100)='./file0\x00', 0x420200, 0x8) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x8d, 0x0, 0x8, 0x40, 0x0, 0xff19, 0x801, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0xffffffffffffff6a}, 0x806, 0x0, 0x70f27210, 0x3, 0x1, 0x1, 0x401, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0x1) 16:37:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000940)={0xa, 0x0, 0x7d84, @dev, 0x2}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000000000000700000044140c020000000002000000ac1e00010000000000000000b5b299a30b69765dccef56720dda8872c18487aff02ad5e0dfd86ec6771f12d3fc77bd1b65bbf981b4413255a968b385c1bd37f6a9514cea"], 0x28}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x729f}}, './file0\x00'}) 16:37:00 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[]) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x9, 0x75, 0x4, 0x0, 0x6, 0x1424e, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0xa0, 0x6, 0x2, 0x6, 0x0, 0x4, 0x100, 0x0, 0x3, 0x0, 0x1000}, 0x0, 0x4, r0, 0x13) add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x87fe}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@nojoliet}, {@hide}, {@hide}, {@nocompress}]}) [ 2181.631053] nfs: Unknown parameter 'x' 16:37:01 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6c, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:01 executing program 3: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e20, @empty}, {0x0, @local}, 0x28, {0x2, 0x4e22, @multicast1}, 'veth0_to_team\x00'}) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000001540)='./file1\x00') creat(&(0x7f0000000240)='./file0\x00', 0x60) mount$cgroup(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x0, 0xffffffff, 0x8f1, 0x4}) write(r0, &(0x7f0000000440)="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", 0x1000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) openat(r2, &(0x7f0000001500)='./file1\x00', 0x8042, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) execve(&(0x7f0000000280)='./file1\x00', &(0x7f0000001440)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='veth0_to_team\x00', &(0x7f0000000380)='cgroup\x00', &(0x7f00000003c0)=']<{(\x00'], &(0x7f00000014c0)=[&(0x7f0000001480)='[{#$(\x00']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) 16:37:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000400000000060000006a0000000f0000f9f30000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='gfs2meta\x00', 0x1000080, &(0x7f00000001c0)='}\\#**}\x00') 16:37:15 executing program 1: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r2) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 16:37:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x0) 16:37:15 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:37:15 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x74, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:15 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:37:15 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r4, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:37:15 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r2) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r5 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r5, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r6 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) [ 2195.736069] blktrace: Concurrent blktraces are not allowed on sg0 16:37:15 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7a, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:15 executing program 3: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f0000000540), 0x6e, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/51, 0x33}, {&(0x7f0000000600)=""/183, 0xb7}, {&(0x7f00000006c0)=""/189, 0xbd}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="c9e6d1d7"], 0xa0}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000900)=""/107, 0x6b}, {&(0x7f0000000980)=""/142, 0x8e}, {&(0x7f0000000a40)=""/124, 0x7c}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/200, 0xc8}], 0x5, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000d40)=""/230, 0xe6}, {&(0x7f0000000e40)=""/138, 0x8a}, {&(0x7f0000000f00)=""/145, 0x91}, {&(0x7f0000000fc0)=""/49, 0x31}, {&(0x7f0000001000)=""/16, 0x10}, {&(0x7f0000001040)=""/147, 0x93}], 0x6, &(0x7f0000001180)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001280), 0x6e, &(0x7f0000001640)=[{&(0x7f0000001300)=""/32, 0x20}, {&(0x7f0000001340)=""/30, 0x1e}, {&(0x7f0000001380)=""/46, 0x2e}, {&(0x7f00000013c0)=""/212, 0xd4}, {&(0x7f00000014c0)=""/168, 0xa8}, {&(0x7f0000001580)=""/66, 0x42}, {&(0x7f0000001600)=""/27, 0x1b}], 0x7}}, {{&(0x7f00000016c0)=@abs, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000001740)=""/127, 0x7f}, {&(0x7f00000017c0)=""/113, 0x71}, {&(0x7f0000001840)=""/76, 0x4c}, {&(0x7f00000018c0)=""/253, 0xfd}, {&(0x7f00000019c0)=""/63, 0x3f}, {&(0x7f0000001a00)=""/77, 0x4d}, {&(0x7f0000001a80)=""/103, 0x67}, {&(0x7f0000001b00)=""/4096, 0x1000}], 0x8, &(0x7f0000002b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002c80)=""/26, 0x1a}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002d00)=""/42, 0x2a}, {&(0x7f0000002d40)=""/153, 0x99}], 0x2, &(0x7f0000002e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002f00)=@abs, 0x6e, &(0x7f0000003200)=[{&(0x7f0000002f80)=""/27, 0x1b}, {&(0x7f0000002fc0)=""/122, 0x7a}, {&(0x7f0000003040)=""/38, 0x26}, {&(0x7f0000003080)=""/196, 0xc4}, {&(0x7f0000003180)=""/95, 0x5f}], 0x5, &(0x7f0000003280)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000003300), 0x6e, &(0x7f0000003400)=[{&(0x7f0000003380)=""/124, 0x7c}], 0x1}}], 0x9, 0x40012000, &(0x7f0000003680)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000036c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000080)={@local, 0x78, r6}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r6}) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@expire={0x1e4, 0x18, 0x800, 0x70bd2a, 0x25dfdbfb, {{{@in6=@mcast2, @in=@multicast1, 0x4e23, 0x4, 0x4e23, 0x5, 0xa, 0xa0, 0x80, 0x2e, r6, 0xee01}, {@in6=@empty, 0x4d4, 0xff}, @in6=@local, {0x3, 0x9, 0x36e, 0x0, 0x8, 0x1d9, 0x4, 0x7}, {0x800, 0x5, 0x4, 0xea4}, {0x3, 0x917, 0x2}, 0x70bd2b, 0x3503, 0xa, 0x3, 0x7, 0x62}, 0x1}, [@extra_flags={0x8, 0x18, 0x9}, @algo_auth={0xe2, 0x1, {{'crct10dif-arm64-neon\x00'}, 0x4d0, "99352a738bc29dd16c09463d6976e31a9822d92067029b1060360cc7d4e4c65a418461fb00a7576470bc06aeeb576569c5cd48c9b0eb38f4de85a0ac0560f62a43aada8788d6efbc128f0d8abfdc2858f923c7956c81ee59ffff84b405c255259175ecc0f510aa44f7caba8518eb6a795c276488097f6524668261574530e0f9f67928f1e79e7c0c6462efbf7135de122f0a50144768347439dd"}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000}, 0x40814) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="34010000170001000000000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000ffe7000000000000000000048f6f81a0ca70e7d277a7e0ec7199c773fa64ea929f2e4790495719f50026c56e35eb26e1a9ab337fdae9213aca022d6df455f980d439b7c371fc43bb2bff983549ef025136e33ba2a1ee50fffc208a4be56cbc3caa5b0a3528ca17c3460eb1a6574e4e4411613bacf3527d6659b2eae9939d899705f05144ac81", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00"/48, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015000000000000000000"], 0x134}}, 0x0) [ 2195.874656] nfs: Unknown parameter 'x' [ 2195.896689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 16:37:15 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x82, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x80000000, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1c5, r0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x50d802, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) dup2(0xffffffffffffffff, r1) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x462) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x13, 0xe, 0x6, &(0x7f00000001c0)}) 16:37:15 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:37:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/82, 0x52, 0x6) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5e, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x2018000, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x3f6, 0x300, 0x70bd28, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8081}, 0x800) shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x6000) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x10b, 0x0) 16:37:15 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:37:15 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r4, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:37:15 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x91, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2196.427955] nfs: Unknown parameter 'x' 16:37:15 executing program 1: syz_80211_join_ibss(&(0x7f0000002280)='wlan1\x00', 0x0, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f00000000c0)=@default_ibss_ssid, 0x6, 0x1) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@random="e77664030d", 0x5, 0x0) set_mempolicy(0x1c003, &(0x7f0000000000)=0x9, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x9, 0x2) syz_80211_join_ibss(&(0x7f00000001c0)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x1) set_mempolicy(0x8000, &(0x7f0000000100)=0x2, 0xd8ff) set_mempolicy(0x1, &(0x7f0000000280)=0x71f75824, 0x6) set_mempolicy(0x4000, &(0x7f0000000080), 0x6) 16:37:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x0) 16:37:15 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:37:15 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xa2, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:15 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10021, &(0x7f0000000100)={[{@nr_blocks={'nr_blocks', 0x3d, [0x39]}}, {@huge_within_size}]}) accept4(0xffffffffffffffff, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80, 0x80000) [ 2196.614860] tmpfs: Unsupported parameter 'huge' [ 2196.618275] tmpfs: Unsupported parameter 'huge' 16:37:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000160011cd000000000000df000000000004000080"], 0x18}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r0, 0x0, r1) r2 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) unlinkat(r2, &(0x7f00000004c0)='./file0\x00', 0x200) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000) epoll_create1(0x80000) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x6, 0x80, 0x8, 0x8, 0x0, 0x3f, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000001c0), 0x9}, 0x14000, 0x200000004, 0xfe0a, 0x9, 0x1, 0x7, 0x1, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0x5) getsockname$netlink(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000240)=0xc) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 16:37:16 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'lo\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/i2c_algo_bit', 0x100, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000180)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$incfs(r2, &(0x7f0000000240)='.log\x00', 0xc800, 0x1c0) read(r4, &(0x7f00000002c0)=""/249, 0xf9) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'bridge_slave_0\x00', {0x2, 0x0, @multicast2}}) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xa8b9, @loopback}, 0x1c) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001200)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000001c0)={r5, "1169feeb427ab0e2253af9114f0f7407"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001e00)={r5, "ba35678a097803b587a48365a5596083"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000440)={{r0}, 0x0, 0x12, @inherit={0x60, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000030000000000000039b000000000000008000500000000000400000000000000ff7f000000000000010100000000000000000000010000000000000000000000200000000000810000000000000000000900000000000000"]}, @devid=r5}) 16:37:16 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x191, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x264}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x90b) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000080000000c00018008000100506ac1fbec3519", @ANYRES32=r6, @ANYBLOB="18000280140003800c000180080001000000000004000180"], 0x38}}, 0x0) [ 2196.788063] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 16:37:32 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x191, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:32 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:37:32 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r4, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:37:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x406, r3) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="0000abe02400030021206cda3b5e5672b89aed7b0427993507000000910000000706006dff0043a9d7cceb232fb8", 0x63}, {&(0x7f0000000140)="ec4ba2f1cd78fac4548d3a6aa19be5b36fd6d23eb36cb66cce7448e589d837acf9aa486685d570fa777e9ddd8a47a6a2d8b8395d2724f99edc422f126d55de02b66eef8f87f800000000732d0fe90852384d91c589f4096326be92b92db94f75090400b968a8fc3c61bf7e1f86a26a28c4dcc229ad622f2544c9f019c175645c5aa6b1f2da80823e728007c0567356403d", 0x91}], 0x2) 16:37:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x0) 16:37:32 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x194, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:32 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:37:32 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:37:32 executing program 3: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:37:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000040)={{r0}, {@void, @max}}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="007da1804886b1655e09966a7e07c44fecf87834ecdbb6650240e9635802006dcb1b3d4462fe59be4c704b17c759b22d78c09367f849dcb8494ee15dcf7d0932dbaed64f8c680c37873c7d65eecdf0eaed8aa6cb52ef5ae7ab35864fec9cb6832dcf658d3b207a59e9d55e0757fcf48c97ef843f7e7986f5520f5c1169f4c6f8dd2f0fdca0235bccc2a12aa7e9621b1a6f4085e4e7c188b7edd9ff"]) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x20) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)={0x2}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000100)={0x9fcf, 0x38, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) unshare(0x48020200) [ 2213.402685] nfs: Unknown parameter 'x' 16:37:32 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x299, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:32 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x36c, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:32 executing program 3: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:37:33 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:37:33 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3e0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:33 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) lseek(0xffffffffffffffff, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) creat(0x0, 0x183) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4c20, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7ff, 0x9}) sendfile(r0, r3, 0x0, 0x100000001) 16:37:33 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) [ 2213.869730] nfs: Unknown parameter 'x' 16:37:33 executing program 3: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:37:48 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3f9, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:37:48 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:37:48 executing program 1: ftruncate(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') syz_open_dev$hiddev(0x0, 0x3, 0x200200) dup2(0xffffffffffffffff, r1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1, 0x6, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x14, 0x100000001}, 0x10110, 0xfffffffffffffff7, 0x10001, 0x2, 0x6c, 0x1f, 0x4, 0x0, 0x1, 0x0, 0xa17b}, 0x0, 0x5, r0, 0x2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) 16:37:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x0) 16:37:48 executing program 3: setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private0}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(0xffffffffffffffff, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = accept$inet6(r3, 0x0, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="08cb0e860100000000001000ec60e8a2e3fb7ba192f253e3333e", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in=@loopback, @in=@multicast1}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x2, 0x0, 0x1004, 0x7, 0x0, 0xfffdffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000002b80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002a40)=[{{&(0x7f0000000480)=@generic, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001600)=""/212, 0xd4}, 0x68}, {{&(0x7f0000001700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/137, 0x89}, {&(0x7f0000001840)=""/182, 0xb6}, {&(0x7f0000001900)=""/169, 0xa9}], 0x3, &(0x7f0000001a00)=""/31, 0x1f}, 0x5}, {{&(0x7f0000001a40)=@tipc, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001ac0)=""/108, 0x6c}, {&(0x7f0000001b40)=""/5, 0x5}, {&(0x7f0000001b80)=""/29, 0x1d}, {&(0x7f0000001bc0)=""/128, 0x80}, {&(0x7f0000001c40)=""/119, 0x77}, {&(0x7f0000001cc0)=""/92, 0x5c}, {&(0x7f0000001e00)=""/129, 0x81}], 0x7, &(0x7f0000001d40)=""/30, 0x1e}, 0xac40bda5}, {{&(0x7f0000001f40)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001fc0)=""/254, 0xfe}, {&(0x7f00000020c0)=""/145, 0x91}, {&(0x7f0000002180)=""/251, 0xfb}, {&(0x7f0000002280)=""/27, 0x1b}, {&(0x7f00000022c0)=""/169, 0xa9}, {&(0x7f0000002380)=""/181, 0xb5}, {&(0x7f0000002440)=""/193, 0xc1}, {&(0x7f0000002540)=""/46, 0x2e}], 0x8, &(0x7f0000002600)=""/157, 0x9d}, 0x8}, {{&(0x7f00000026c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002740)=""/97, 0x61}, {&(0x7f00000027c0)=""/227, 0xe3}, {&(0x7f00000028c0)=""/241, 0xf1}, {&(0x7f00000029c0)=""/33, 0x21}], 0x4}}], 0x5, 0x1, &(0x7f0000002bc0)={r5, r6+10000000}) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r7, 0x6) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3f, 0x4, 0x4, 0x46, 0x0, 0xd92, 0x89400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f0000000280), 0x6}, 0x8, 0xffffffff00000001, 0x8001, 0x2, 0x6, 0x5, 0x401, 0x0, 0x2, 0x0, 0x4000000000000000}, 0x0, 0xb, r7, 0x9) 16:37:48 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:37:48 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:37:48 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) [ 2228.767468] device lo entered promiscuous mode [ 2228.795989] nfs: Unknown parameter 'x' [ 2228.814055] device lo left promiscuous mode [ 2228.902602] device lo entered promiscuous mode [ 2228.903838] device lo left promiscuous mode 16:38:02 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:38:02 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3fe, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:38:02 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:38:02 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:38:02 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r4, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:38:02 executing program 1: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@loopback, @loopback, 0x0, 0x3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @broadcast]}, 0x1c) syz_emit_ethernet(0x4f, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ee6e", 0x19, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1, [{0x0, 0x0, "7150a0"}]}}}}}}, 0x0) 16:38:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x0) 16:38:02 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:38:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x80000, 0x88c, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x3, 0x1f, 0x7, 0x0, 0x5da1, 0x2000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1c87, 0x0, @perf_bp, 0x4, 0x2, 0x7, 0x7, 0x2, 0x7, 0x101, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x5, r0, 0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) [ 2243.431642] nfs: Unknown parameter 'x' 16:38:02 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x700, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:38:17 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:38:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x80000, 0x88c, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x3, 0x1f, 0x7, 0x0, 0x5da1, 0x2000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1c87, 0x0, @perf_bp, 0x4, 0x2, 0x7, 0x7, 0x2, 0x7, 0x101, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x5, r0, 0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) 16:38:17 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:38:17 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:38:17 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:38:17 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xa00, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:38:17 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) fcntl$setpipe(r0, 0x407, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r2, 0x9) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x4008000) accept$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 16:38:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) (fail_nth: 1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 2258.660729] blktrace: Concurrent blktraces are not allowed on sg0 [ 2258.727901] nfs: Unknown parameter 'x' [ 2258.773868] FAULT_INJECTION: forcing a failure. [ 2258.773868] name failslab, interval 1, probability 0, space 0, times 0 [ 2258.777094] CPU: 1 PID: 13901 Comm: syz-executor.4 Not tainted 5.10.183 #1 [ 2258.778604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2258.780402] Call Trace: [ 2258.780985] dump_stack+0x107/0x167 [ 2258.781790] should_fail.cold+0x5/0xa [ 2258.782629] ? alloc_pipe_info+0x10a/0x590 [ 2258.783551] should_failslab+0x5/0x20 [ 2258.784371] kmem_cache_alloc_trace+0x55/0x320 [ 2258.785364] alloc_pipe_info+0x10a/0x590 [ 2258.786275] splice_direct_to_actor+0x774/0x980 [ 2258.787285] ? _cond_resched+0x12/0x80 [ 2258.788123] ? inode_security+0x107/0x140 [ 2258.789011] ? pipe_to_sendpage+0x380/0x380 [ 2258.789944] ? selinux_file_permission+0x92/0x520 [ 2258.790996] ? do_splice_to+0x160/0x160 [ 2258.791861] ? security_file_permission+0x24e/0x570 [ 2258.792947] do_splice_direct+0x1c4/0x290 [ 2258.793850] ? splice_direct_to_actor+0x980/0x980 [ 2258.794902] ? selinux_file_permission+0x92/0x520 [ 2258.795944] ? security_file_permission+0x24e/0x570 [ 2258.797039] do_sendfile+0x553/0x1090 [ 2258.797874] ? do_pwritev+0x270/0x270 [ 2258.798700] ? wait_for_completion_io+0x270/0x270 [ 2258.799737] ? rcu_read_lock_any_held+0x75/0xa0 [ 2258.800747] ? vfs_write+0x354/0xa70 [ 2258.801557] __x64_sys_sendfile64+0x1d1/0x210 [ 2258.802531] ? __ia32_sys_sendfile+0x220/0x220 [ 2258.803530] do_syscall_64+0x33/0x40 [ 2258.804333] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2258.805432] RIP: 0033:0x7f5ad6de8b19 [ 2258.806261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2258.810267] RSP: 002b:00007f5ad433d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2258.812132] RAX: ffffffffffffffda RBX: 00007f5ad6efc020 RCX: 00007f5ad6de8b19 [ 2258.813773] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 2258.815491] RBP: 00007f5ad433d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2258.817078] R10: 0000000080000004 R11: 0000000000000246 R12: 0000000000000001 [ 2258.818616] R13: 00007ffe4842f0ff R14: 00007f5ad433d300 R15: 0000000000022000 16:38:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1, 0x9, 0x1, 0x8, 0x0, 0x8, 0x11041, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x400, 0x7, 0xfff, 0x8, 0x4, 0x83d, 0x8, 0x0, 0x8000000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:38:18 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x2000, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:38:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x80000, 0x88c, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x3, 0x1f, 0x7, 0x0, 0x5da1, 0x2000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1c87, 0x0, @perf_bp, 0x4, 0x2, 0x7, 0x7, 0x2, 0x7, 0x101, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x5, r0, 0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) 16:38:18 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3000, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:38:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x80000, 0x88c, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x3, 0x1f, 0x7, 0x0, 0x5da1, 0x2000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1c87, 0x0, @perf_bp, 0x4, 0x2, 0x7, 0x7, 0x2, 0x7, 0x101, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x5, r0, 0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) 16:38:18 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:38:18 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:38:18 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:38:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x80000, 0x88c, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x3, 0x1f, 0x7, 0x0, 0x5da1, 0x2000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1c87, 0x0, @perf_bp, 0x4, 0x2, 0x7, 0x7, 0x2, 0x7, 0x101, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x5, r0, 0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) 16:38:18 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4000, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:38:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) (fail_nth: 2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:38:18 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:38:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x80000, 0x88c, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x3, 0x1f, 0x7, 0x0, 0x5da1, 0x2000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1c87, 0x0, @perf_bp, 0x4, 0x2, 0x7, 0x7, 0x2, 0x7, 0x101, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x5, r0, 0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') [ 2259.752957] nfs: Unknown parameter 'x' [ 2259.835700] FAULT_INJECTION: forcing a failure. [ 2259.835700] name failslab, interval 1, probability 0, space 0, times 0 [ 2259.838187] CPU: 1 PID: 13947 Comm: syz-executor.4 Not tainted 5.10.183 #1 [ 2259.839595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2259.841274] Call Trace: [ 2259.841821] dump_stack+0x107/0x167 [ 2259.842570] should_fail.cold+0x5/0xa [ 2259.843342] ? create_object.isra.0+0x3a/0xa20 [ 2259.844272] should_failslab+0x5/0x20 [ 2259.845041] kmem_cache_alloc+0x5b/0x310 [ 2259.845871] create_object.isra.0+0x3a/0xa20 [ 2259.846773] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2259.847818] kmem_cache_alloc_trace+0x151/0x320 [ 2259.848757] alloc_pipe_info+0x10a/0x590 [ 2259.849595] splice_direct_to_actor+0x774/0x980 [ 2259.850542] ? _cond_resched+0x12/0x80 [ 2259.851339] ? inode_security+0x107/0x140 [ 2259.852183] ? pipe_to_sendpage+0x380/0x380 [ 2259.853063] ? selinux_file_permission+0x92/0x520 [ 2259.854073] ? do_splice_to+0x160/0x160 [ 2259.854890] ? security_file_permission+0x24e/0x570 [ 2259.855924] do_splice_direct+0x1c4/0x290 [ 2259.856760] ? splice_direct_to_actor+0x980/0x980 [ 2259.857727] ? selinux_file_permission+0x92/0x520 [ 2259.858717] ? security_file_permission+0x24e/0x570 [ 2259.859737] do_sendfile+0x553/0x1090 [ 2259.860529] ? do_pwritev+0x270/0x270 [ 2259.861308] ? wait_for_completion_io+0x270/0x270 [ 2259.862313] ? rcu_read_lock_any_held+0x75/0xa0 [ 2259.863250] ? vfs_write+0x354/0xa70 [ 2259.864014] __x64_sys_sendfile64+0x1d1/0x210 [ 2259.864929] ? __ia32_sys_sendfile+0x220/0x220 [ 2259.865879] do_syscall_64+0x33/0x40 [ 2259.866643] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2259.867685] RIP: 0033:0x7f5ad6de8b19 [ 2259.868447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2259.872208] RSP: 002b:00007f5ad433d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2259.873720] RAX: ffffffffffffffda RBX: 00007f5ad6efc020 RCX: 00007f5ad6de8b19 [ 2259.875186] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 2259.876637] RBP: 00007f5ad433d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2259.878094] R10: 0000000080000004 R11: 0000000000000246 R12: 0000000000000001 [ 2259.879550] R13: 00007ffe4842f0ff R14: 00007f5ad433d300 R15: 0000000000022000 16:38:19 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4800, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:38:19 executing program 3: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$incfs(r0, 0x0, 0x0, 0x20) r3 = openat(r2, &(0x7f0000000300)='./file0\x00', 0x380, 0x199) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$nl_generic(r3, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x400c040}, 0x8051) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40c0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @none, 0x6}, 0xe) r6 = inotify_init1(0x0) r7 = fcntl$dupfd(r6, 0x0, r6) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x761800, 0x0) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x70}}, 0x24000000) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffc0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:38:19 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:38:35 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4c00, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:38:35 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:38:35 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:38:35 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:38:35 executing program 3: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:38:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) (fail_nth: 3) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:38:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x80000, 0x88c, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x3, 0x1f, 0x7, 0x0, 0x5da1, 0x2000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1c87, 0x0, @perf_bp, 0x4, 0x2, 0x7, 0x7, 0x2, 0x7, 0x101, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x5, r0, 0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) 16:38:35 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 2275.965240] nfs: Unknown parameter 'x' [ 2275.981875] FAULT_INJECTION: forcing a failure. [ 2275.981875] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.983953] CPU: 0 PID: 13999 Comm: syz-executor.4 Not tainted 5.10.183 #1 [ 2275.985067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2275.986468] Call Trace: [ 2275.986927] dump_stack+0x107/0x167 [ 2275.987548] should_fail.cold+0x5/0xa [ 2275.988192] ? alloc_pipe_info+0x1e5/0x590 [ 2275.988923] should_failslab+0x5/0x20 [ 2275.989569] __kmalloc+0x72/0x390 [ 2275.990189] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2275.991053] alloc_pipe_info+0x1e5/0x590 [ 2275.991715] splice_direct_to_actor+0x774/0x980 [ 2275.992499] ? _cond_resched+0x12/0x80 [ 2275.993176] ? inode_security+0x107/0x140 [ 2275.993868] ? pipe_to_sendpage+0x380/0x380 [ 2275.994615] ? selinux_file_permission+0x92/0x520 [ 2275.995429] ? do_splice_to+0x160/0x160 [ 2275.996074] ? security_file_permission+0x24e/0x570 [ 2275.996921] do_splice_direct+0x1c4/0x290 [ 2275.997621] ? splice_direct_to_actor+0x980/0x980 [ 2275.998451] ? selinux_file_permission+0x92/0x520 [ 2275.999271] ? security_file_permission+0x24e/0x570 [ 2276.000118] do_sendfile+0x553/0x1090 [ 2276.000777] ? do_pwritev+0x270/0x270 [ 2276.001428] ? wait_for_completion_io+0x270/0x270 [ 2276.002260] ? rcu_read_lock_any_held+0x75/0xa0 [ 2276.003040] ? vfs_write+0x354/0xa70 [ 2276.003674] __x64_sys_sendfile64+0x1d1/0x210 [ 2276.004405] ? __ia32_sys_sendfile+0x220/0x220 [ 2276.005185] do_syscall_64+0x33/0x40 [ 2276.005819] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2276.006668] RIP: 0033:0x7f5ad6de8b19 [ 2276.007305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2276.010408] RSP: 002b:00007f5ad433d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2276.011709] RAX: ffffffffffffffda RBX: 00007f5ad6efc020 RCX: 00007f5ad6de8b19 [ 2276.012912] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 2276.014105] RBP: 00007f5ad433d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2276.015318] R10: 0000000080000004 R11: 0000000000000246 R12: 0000000000000001 [ 2276.016519] R13: 00007ffe4842f0ff R14: 00007f5ad433d300 R15: 0000000000022000 16:38:35 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5d00, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:38:35 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000500)='i', 0xffff888008d4f780}], 0x40000, &(0x7f0000001640)) 16:38:35 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:38:35 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) [ 2276.341612] nfs: Unknown parameter 'x' 16:38:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x80000, 0x88c, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x3, 0x1f, 0x7, 0x0, 0x5da1, 0x2000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1c87, 0x0, @perf_bp, 0x4, 0x2, 0x7, 0x7, 0x2, 0x7, 0x101, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x5, r0, 0x7) 16:38:51 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:38:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) (fail_nth: 4) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:38:51 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:38:51 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6800, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:38:51 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:38:51 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:38:51 executing program 3: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/120, 0x78) modify_ldt$read_default(0x2, &(0x7f0000000100)=""/76, 0x4c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), 0xffffffffffffffff) [ 2292.235050] nfs: Unknown parameter 'x' [ 2292.369131] FAULT_INJECTION: forcing a failure. [ 2292.369131] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.371959] CPU: 0 PID: 14045 Comm: syz-executor.4 Not tainted 5.10.183 #1 [ 2292.373393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2292.375096] Call Trace: [ 2292.375643] dump_stack+0x107/0x167 [ 2292.376408] should_fail.cold+0x5/0xa [ 2292.377196] ? create_object.isra.0+0x3a/0xa20 [ 2292.378157] should_failslab+0x5/0x20 [ 2292.378963] kmem_cache_alloc+0x5b/0x310 [ 2292.379820] create_object.isra.0+0x3a/0xa20 [ 2292.380739] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2292.381805] __kmalloc+0x16e/0x390 [ 2292.382567] alloc_pipe_info+0x1e5/0x590 [ 2292.383416] splice_direct_to_actor+0x774/0x980 [ 2292.384381] ? _cond_resched+0x12/0x80 [ 2292.385188] ? inode_security+0x107/0x140 [ 2292.386042] ? pipe_to_sendpage+0x380/0x380 [ 2292.386951] ? selinux_file_permission+0x92/0x520 [ 2292.387951] ? do_splice_to+0x160/0x160 [ 2292.388771] ? security_file_permission+0x24e/0x570 [ 2292.389814] do_splice_direct+0x1c4/0x290 [ 2292.390667] ? splice_direct_to_actor+0x980/0x980 [ 2292.391652] ? selinux_file_permission+0x92/0x520 [ 2292.392644] ? security_file_permission+0x24e/0x570 [ 2292.393685] do_sendfile+0x553/0x1090 [ 2292.394492] ? do_pwritev+0x270/0x270 [ 2292.395275] ? wait_for_completion_io+0x270/0x270 [ 2292.396267] ? rcu_read_lock_any_held+0x75/0xa0 [ 2292.397221] ? vfs_write+0x354/0xa70 [ 2292.397998] __x64_sys_sendfile64+0x1d1/0x210 [ 2292.398944] ? __ia32_sys_sendfile+0x220/0x220 [ 2292.399901] do_syscall_64+0x33/0x40 [ 2292.400668] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2292.401721] RIP: 0033:0x7f5ad6de8b19 [ 2292.402495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2292.406235] RSP: 002b:00007f5ad435e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2292.407838] RAX: ffffffffffffffda RBX: 00007f5ad6efbf60 RCX: 00007f5ad6de8b19 [ 2292.409297] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 2292.410763] RBP: 00007f5ad435e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2292.412223] R10: 0000000080000004 R11: 0000000000000246 R12: 0000000000000001 [ 2292.413686] R13: 00007ffe4842f0ff R14: 00007f5ad435e300 R15: 0000000000022000 16:38:51 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6c00, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:38:51 executing program 3: r0 = syz_io_uring_setup(0x119d, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x18012, 0xffffffffffffffff, 0x8000000) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r6, 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet_udp_int(r6, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xc9, 0x25, 0x40, 0x5, 0x0, 0x80000000, 0x90422, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7ff}, 0x1200a, 0x0, 0x6, 0x2, 0x5, 0x0, 0x1ff, 0x0, 0x61, 0x0, 0x7e}, 0x0, 0x0, r6, 0x1) 16:38:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x80000, 0x88c, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) 16:38:51 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6c03, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:38:52 executing program 3: mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1) chdir(&(0x7f0000000000)='./file0\x00') clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x10000) 16:39:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) write$binfmt_elf64(r4, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x0, 0xeb, 0x3f7, 0x3, 0x6, 0x3, 0x19d, 0x40, 0xc1, 0x401, 0x61, 0x38, 0x2, 0x400, 0x7b8, 0x2}, [{0x70000000, 0x3, 0x401, 0x0, 0x6, 0xfff, 0x3, 0x4}, {0x70000000, 0x400, 0x82, 0x20, 0x20, 0x3, 0x20, 0x3}], "b283c4754a5e745cdbdf9489b5fa0013f1788a4ec92ec33711e70020d0001e72c1c54f4f895cd12f7c59de973cf527ae366415717169ecbd177072d6"}, 0xec) 16:39:09 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:39:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x80000, 0x88c, &(0x7f0000000180)) close_range(r1, 0xffffffffffffffff, 0x2) 16:39:09 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:39:09 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7400, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:39:09 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:39:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) (fail_nth: 5) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:39:09 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, 0x0, 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) [ 2309.877883] nfs: Unknown parameter 'x' 16:39:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) write$binfmt_elf64(r4, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x0, 0xeb, 0x3f7, 0x3, 0x6, 0x3, 0x19d, 0x40, 0xc1, 0x401, 0x61, 0x38, 0x2, 0x400, 0x7b8, 0x2}, [{0x70000000, 0x3, 0x401, 0x0, 0x6, 0xfff, 0x3, 0x4}, {0x70000000, 0x400, 0x82, 0x20, 0x20, 0x3, 0x20, 0x3}], "b283c4754a5e745cdbdf9489b5fa0013f1788a4ec92ec33711e70020d0001e72c1c54f4f895cd12f7c59de973cf527ae366415717169ecbd177072d6"}, 0xec) [ 2309.999631] FAULT_INJECTION: forcing a failure. [ 2309.999631] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.002573] CPU: 1 PID: 14108 Comm: syz-executor.4 Not tainted 5.10.183 #1 [ 2310.004000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2310.005727] Call Trace: [ 2310.006298] dump_stack+0x107/0x167 [ 2310.007106] should_fail.cold+0x5/0xa [ 2310.007893] ? do_blockdev_direct_IO+0x21b/0x43f0 [ 2310.008907] should_failslab+0x5/0x20 [ 2310.009687] kmem_cache_alloc+0x5b/0x310 [ 2310.010559] ? iov_iter_alignment+0x1b1/0x810 [ 2310.011479] do_blockdev_direct_IO+0x21b/0x43f0 [ 2310.012442] ? fat_add_cluster+0x100/0x100 [ 2310.013319] ? perf_trace_lock+0xac/0x490 [ 2310.014167] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2310.015256] ? lock_chain_count+0x20/0x20 [ 2310.016107] ? __lockdep_reset_lock+0x180/0x180 [ 2310.017060] ? __lock_acquire+0xbb1/0x5b00 [ 2310.017923] ? sb_init_dio_done_wq+0x80/0x80 [ 2310.018848] ? find_held_lock+0x2c/0x110 [ 2310.019719] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2310.020792] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2310.021848] ? trace_hardirqs_on+0x5b/0x180 [ 2310.022746] ? find_held_lock+0x2c/0x110 [ 2310.023616] ? rcu_read_lock_any_held+0x75/0xa0 [ 2310.024566] ? __blockdev_direct_IO+0x32/0x100 [ 2310.025496] ? fat_add_cluster+0x100/0x100 [ 2310.026363] fat_direct_IO+0x1d6/0x380 [ 2310.027191] generic_file_read_iter+0x259/0x490 [ 2310.028153] generic_file_splice_read+0x455/0x6d0 [ 2310.029140] ? pipe_to_user+0x170/0x170 [ 2310.029948] ? _cond_resched+0x12/0x80 [ 2310.030757] ? avc_policy_seqno+0x9/0x70 [ 2310.031582] ? selinux_file_permission+0x92/0x520 [ 2310.032576] ? lockdep_init_map_type+0x2c7/0x780 [ 2310.033553] ? pipe_to_user+0x170/0x170 [ 2310.034365] do_splice_to+0x10e/0x160 [ 2310.035181] splice_direct_to_actor+0x2fe/0x980 [ 2310.036140] ? pipe_to_sendpage+0x380/0x380 [ 2310.037028] ? do_splice_to+0x160/0x160 [ 2310.037838] ? security_file_permission+0x24e/0x570 [ 2310.038890] do_splice_direct+0x1c4/0x290 [ 2310.039745] ? splice_direct_to_actor+0x980/0x980 [ 2310.040725] ? selinux_file_permission+0x92/0x520 [ 2310.041708] ? security_file_permission+0x24e/0x570 [ 2310.042750] do_sendfile+0x553/0x1090 [ 2310.043540] ? do_pwritev+0x270/0x270 [ 2310.044321] ? wait_for_completion_io+0x270/0x270 [ 2310.045305] ? rcu_read_lock_any_held+0x75/0xa0 [ 2310.046249] ? vfs_write+0x354/0xa70 [ 2310.047047] __x64_sys_sendfile64+0x1d1/0x210 [ 2310.047974] ? __ia32_sys_sendfile+0x220/0x220 [ 2310.048930] do_syscall_64+0x33/0x40 [ 2310.049691] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2310.050750] RIP: 0033:0x7f5ad6de8b19 [ 2310.051528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2310.055272] RSP: 002b:00007f5ad433d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2310.056861] RAX: ffffffffffffffda RBX: 00007f5ad6efc020 RCX: 00007f5ad6de8b19 [ 2310.058319] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 2310.059786] RBP: 00007f5ad433d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2310.061233] R10: 0000000080000004 R11: 0000000000000246 R12: 0000000000000001 [ 2310.062698] R13: 00007ffe4842f0ff R14: 00007f5ad433d300 R15: 0000000000022000 16:39:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) write$binfmt_elf64(r4, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x0, 0xeb, 0x3f7, 0x3, 0x6, 0x3, 0x19d, 0x40, 0xc1, 0x401, 0x61, 0x38, 0x2, 0x400, 0x7b8, 0x2}, [{0x70000000, 0x3, 0x401, 0x0, 0x6, 0xfff, 0x3, 0x4}, {0x70000000, 0x400, 0x82, 0x20, 0x20, 0x3, 0x20, 0x3}], "b283c4754a5e745cdbdf9489b5fa0013f1788a4ec92ec33711e70020d0001e72c1c54f4f895cd12f7c59de973cf527ae366415717169ecbd177072d6"}, 0xec) 16:39:09 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7a00, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:39:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x2) 16:39:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) write$binfmt_elf64(r4, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x0, 0xeb, 0x3f7, 0x3, 0x6, 0x3, 0x19d, 0x40, 0xc1, 0x401, 0x61, 0x38, 0x2, 0x400, 0x7b8, 0x2}, [{0x70000000, 0x3, 0x401, 0x0, 0x6, 0xfff, 0x3, 0x4}, {0x70000000, 0x400, 0x82, 0x20, 0x20, 0x3, 0x20, 0x3}], "b283c4754a5e745cdbdf9489b5fa0013f1788a4ec92ec33711e70020d0001e72c1c54f4f895cd12f7c59de973cf527ae366415717169ecbd177072d6"}, 0xec) 16:39:09 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:39:09 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:39:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) (fail_nth: 6) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:39:09 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:39:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16:39:09 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8200, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:39:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) write$binfmt_elf64(r4, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x0, 0xeb, 0x3f7, 0x3, 0x6, 0x3, 0x19d, 0x40, 0xc1, 0x401, 0x61, 0x38, 0x2, 0x400, 0x7b8, 0x2}, [{0x70000000, 0x3, 0x401, 0x0, 0x6, 0xfff, 0x3, 0x4}, {0x70000000, 0x400, 0x82, 0x20, 0x20, 0x3, 0x20, 0x3}], "b283c4754a5e745cdbdf9489b5fa0013f1788a4ec92ec33711e70020d0001e72c1c54f4f895cd12f7c59de973cf527ae366415717169ecbd177072d6"}, 0xec) 16:39:10 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, 0x0, 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) [ 2310.734103] FAULT_INJECTION: forcing a failure. [ 2310.734103] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.736102] CPU: 0 PID: 14143 Comm: syz-executor.4 Not tainted 5.10.183 #1 [ 2310.737129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2310.738353] Call Trace: [ 2310.738761] dump_stack+0x107/0x167 [ 2310.739304] should_fail.cold+0x5/0xa [ 2310.739866] ? create_object.isra.0+0x3a/0xa20 [ 2310.740538] should_failslab+0x5/0x20 [ 2310.741098] kmem_cache_alloc+0x5b/0x310 [ 2310.741709] create_object.isra.0+0x3a/0xa20 [ 2310.742364] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2310.743125] kmem_cache_alloc+0x159/0x310 [ 2310.743747] ? iov_iter_alignment+0x1b1/0x810 [ 2310.744415] do_blockdev_direct_IO+0x21b/0x43f0 [ 2310.745100] ? fat_add_cluster+0x100/0x100 [ 2310.745720] ? perf_trace_lock+0xac/0x490 [ 2310.746321] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2310.747104] ? lock_chain_count+0x20/0x20 [ 2310.747719] ? __lockdep_reset_lock+0x180/0x180 [ 2310.748398] ? __lock_acquire+0xbb1/0x5b00 [ 2310.749015] ? sb_init_dio_done_wq+0x80/0x80 [ 2310.749654] ? find_held_lock+0x2c/0x110 [ 2310.750275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2310.751045] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2310.751794] ? trace_hardirqs_on+0x5b/0x180 [ 2310.752421] ? find_held_lock+0x2c/0x110 [ 2310.753055] ? rcu_read_lock_any_held+0x75/0xa0 [ 2310.753732] ? __blockdev_direct_IO+0x32/0x100 [ 2310.754400] ? fat_add_cluster+0x100/0x100 [ 2310.755039] fat_direct_IO+0x1d6/0x380 [ 2310.755617] generic_file_read_iter+0x259/0x490 [ 2310.756308] generic_file_splice_read+0x455/0x6d0 [ 2310.757010] ? pipe_to_user+0x170/0x170 [ 2310.757588] ? _cond_resched+0x12/0x80 [ 2310.758166] ? avc_policy_seqno+0x9/0x70 [ 2310.758771] ? selinux_file_permission+0x92/0x520 [ 2310.759475] ? lockdep_init_map_type+0x2c7/0x780 [ 2310.760169] ? pipe_to_user+0x170/0x170 [ 2310.760748] do_splice_to+0x10e/0x160 [ 2310.761295] splice_direct_to_actor+0x2fe/0x980 [ 2310.761972] ? pipe_to_sendpage+0x380/0x380 [ 2310.762609] ? do_splice_to+0x160/0x160 [ 2310.763184] ? security_file_permission+0x24e/0x570 [ 2310.763915] do_splice_direct+0x1c4/0x290 [ 2310.764511] ? splice_direct_to_actor+0x980/0x980 [ 2310.765212] ? selinux_file_permission+0x92/0x520 [ 2310.765911] ? security_file_permission+0x24e/0x570 [ 2310.766655] do_sendfile+0x553/0x1090 [ 2310.767211] ? do_pwritev+0x270/0x270 [ 2310.767763] ? wait_for_completion_io+0x270/0x270 [ 2310.768462] ? rcu_read_lock_any_held+0x75/0xa0 [ 2310.769138] ? vfs_write+0x354/0xa70 [ 2310.769685] __x64_sys_sendfile64+0x1d1/0x210 [ 2310.770344] ? __ia32_sys_sendfile+0x220/0x220 [ 2310.771024] do_syscall_64+0x33/0x40 [ 2310.771555] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2310.772302] RIP: 0033:0x7f5ad6de8b19 [ 2310.772835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2310.775461] RSP: 002b:00007f5ad433d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2310.776540] RAX: ffffffffffffffda RBX: 00007f5ad6efc020 RCX: 00007f5ad6de8b19 [ 2310.777560] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 2310.778604] RBP: 00007f5ad433d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2310.779632] R10: 0000000080000004 R11: 0000000000000246 R12: 0000000000000001 [ 2310.780648] R13: 00007ffe4842f0ff R14: 00007f5ad433d300 R15: 0000000000022000 16:39:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16:39:10 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9100, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2310.895875] nfs: Unknown parameter 'x' 16:39:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) [ 2310.956756] blktrace: Concurrent blktraces are not allowed on sg0 16:39:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16:39:10 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9101, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:39:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16:39:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) 16:39:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16:39:26 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:39:26 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:39:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16:39:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) 16:39:26 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, 0x0, 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:39:26 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9401, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:39:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:39:26 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 2327.020876] nfs: Unknown parameter 'x' 16:39:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)) 16:39:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16:39:26 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9902, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:39:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 16:39:26 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:39:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16:39:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) 16:39:26 executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) [ 2327.581952] nfs: Unknown parameter 'x' 16:39:41 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xa200, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:39:41 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:39:41 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:39:41 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:39:41 executing program 1: pipe2(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16:39:41 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) 16:39:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000002) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:39:41 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:39:41 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) [ 2342.542390] nfs: Unknown parameter 'x' 16:39:41 executing program 1: pipe2(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16:39:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') 16:39:42 executing program 1: pipe2(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16:39:56 executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16:39:56 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xe003, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:39:56 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:39:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) 16:39:56 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:39:56 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:39:56 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:39:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000003) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 2356.792625] blktrace: Concurrent blktraces are not allowed on sg0 16:39:56 executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) [ 2356.926211] nfs: Unknown parameter 'x' 16:40:11 executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16:40:11 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) 16:40:11 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xf903, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:40:11 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:40:11 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x5c000) dup2(0xffffffffffffffff, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:40:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000005) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:40:11 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:40:11 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:40:11 executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:40:11 executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:40:11 executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:40:11 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 2372.318980] nfs: Unknown parameter 'x' 16:40:11 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfe03, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:40:11 executing program 1: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) [ 2372.423838] blktrace: Concurrent blktraces are not allowed on sg0 16:40:27 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:40:27 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:40:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000008) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:40:27 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x5c000) dup2(0xffffffffffffffff, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:40:27 executing program 1: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:40:27 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:40:27 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x403, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2387.821882] blktrace: Concurrent blktraces are not allowed on sg0 16:40:27 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) 16:40:27 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) 16:40:27 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x407, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2387.939545] blktrace: Concurrent blktraces are not allowed on sg0 [ 2387.984856] nfs: Unknown parameter 'x' 16:40:27 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) 16:40:27 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x414, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:40:27 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) 16:40:27 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x5c000) dup2(0xffffffffffffffff, r3) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:40:27 executing program 3: clock_settime(0x0, &(0x7f0000000100)) 16:40:27 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x45f, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2388.405824] nfs: Unknown parameter 'x' 16:40:42 executing program 3: clock_settime(0x0, 0x0) 16:40:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) 16:40:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x8000000e) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:40:42 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x5c000) dup2(r0, 0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:40:42 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:40:42 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x24924924, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:40:42 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:40:42 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:40:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) 16:40:42 executing program 3: clock_settime(0x0, 0x0) [ 2403.262109] nfs: Unknown parameter 'x' 16:40:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) 16:40:42 executing program 3: clock_settime(0x0, 0x0) 16:40:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) 16:40:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) [ 2406.927865] syz-executor.2: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 2406.931483] CPU: 0 PID: 14449 Comm: syz-executor.2 Not tainted 5.10.183 #1 [ 2406.933025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2406.934832] Call Trace: [ 2406.935419] dump_stack+0x107/0x167 [ 2406.936231] warn_alloc.cold+0x95/0x18a [ 2406.937113] ? zone_watermark_ok_safe+0x260/0x260 [ 2406.938174] ? queue_oom_reaper+0x86/0x1e0 [ 2406.939120] ? wait_for_completion_io+0x270/0x270 [ 2406.940195] __alloc_pages_slowpath.constprop.0+0x1c80/0x2130 [ 2406.941491] ? lock_acquire+0xd7/0x470 [ 2406.942354] ? warn_alloc+0x190/0x190 [ 2406.943223] __alloc_pages_nodemask+0x51d/0x600 [ 2406.944258] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2406.945446] ? trace_hardirqs_on+0x5b/0x180 [ 2406.946395] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2406.947711] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2406.948905] ? __alloc_pages_nodemask+0x2d9/0x600 [ 2406.949953] ? alloc_pages_current+0x18f/0x280 [ 2406.950992] alloc_pages_current+0x187/0x280 [ 2406.951970] relay_open_buf.part.0+0x2a5/0xc00 [ 2406.952984] relay_open+0x531/0xa10 [ 2406.953789] do_blk_trace_setup+0x4cf/0xc10 [ 2406.954730] ? _copy_from_user+0xfb/0x1b0 [ 2406.955669] __blk_trace_setup+0xca/0x180 [ 2406.956600] ? do_blk_trace_setup+0xc10/0xc10 [ 2406.957594] ? perf_trace_lock+0xac/0x490 [ 2406.958533] ? SOFTIRQ_verbose+0x10/0x10 [ 2406.959431] blk_trace_setup+0x43/0x60 [ 2406.960308] sg_ioctl_common+0x634/0x2570 [ 2406.961252] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2406.962376] ? do_vfs_ioctl+0x283/0x10d0 [ 2406.963298] ? sg_write+0x120/0x120 [ 2406.964104] ? generic_block_fiemap+0x60/0x60 [ 2406.965132] ? selinux_file_ioctl+0x5d/0x270 [ 2406.966088] ? write_comp_data+0xa/0x80 [ 2406.966960] ? selinux_file_ioctl+0xb6/0x270 [ 2406.967933] ? sg_compat_ioctl+0x120/0x120 [ 2406.968851] sg_ioctl+0x8f/0x120 [ 2406.969594] __x64_sys_ioctl+0x19a/0x210 [ 2406.970483] do_syscall_64+0x33/0x40 [ 2406.971294] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2406.972416] RIP: 0033:0x7fd9ea5bfb19 [ 2406.973227] Code: Unable to access opcode bytes at RIP 0x7fd9ea5bfaef. [ 2406.974644] RSP: 002b:00007fd9e7b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2406.976301] RAX: ffffffffffffffda RBX: 00007fd9ea6d2f60 RCX: 00007fd9ea5bfb19 [ 2406.977844] RDX: 0000000020000080 RSI: 00000000c0481273 RDI: 0000000000000004 [ 2406.979387] RBP: 00007fd9ea619f6d R08: 0000000000000000 R09: 0000000000000000 [ 2406.980952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2406.982496] R13: 00007ffe495ce11f R14: 00007fd9e7b35300 R15: 0000000000022000 [ 2406.984276] Mem-Info: [ 2406.984840] active_anon:6694 inactive_anon:59626 isolated_anon:0 [ 2406.984840] active_file:25 inactive_file:9 isolated_file:0 [ 2406.984840] unevictable:0 dirty:0 writeback:0 [ 2406.984840] slab_reclaimable:9824 slab_unreclaimable:63621 [ 2406.984840] mapped:69651 shmem:117 pagetables:2177 bounce:0 [ 2406.984840] free:2718 free_pcp:70 free_cma:0 [ 2406.991564] Node 0 active_anon:26776kB inactive_anon:238504kB active_file:100kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278604kB dirty:0kB writeback:0kB shmem:468kB writeback_tmp:0kB kernel_stack:4928kB all_unreclaimable? yes [ 2406.996587] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:136kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2407.002254] lowmem_reserve[]: 0 1616 1616 1616 [ 2407.003324] Node 0 DMA32 free:4384kB min:13308kB low:14960kB high:16612kB reserved_highatomic:0KB active_anon:26776kB inactive_anon:238368kB active_file:464kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660504kB mlocked:0kB pagetables:8700kB bounce:0kB free_pcp:280kB local_pcp:248kB free_cma:0kB [ 2407.009570] lowmem_reserve[]: 0 0 0 0 [ 2407.010473] Node 0 DMA: 2*4kB (M) 0*8kB 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 1*128kB (U) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6488kB [ 2407.013733] Node 0 DMA32: 427*4kB (UME) 132*8kB (UME) 31*16kB (UME) 31*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4316kB [ 2407.016894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2407.018742] 154 total pagecache pages [ 2407.019601] 0 pages in swap cache [ 2407.020379] Swap cache stats: add 0, delete 0, find 0/0 [ 2407.021553] Free swap = 0kB [ 2407.022234] Total swap = 0kB [ 2407.022888] 524158 pages RAM [ 2407.023593] 0 pages HighMem/MovableOnly [ 2407.024480] 105055 pages reserved [ 2407.025628] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 2407.028470] CPU: 1 PID: 102 Comm: systemd-journal Not tainted 5.10.183 #1 [ 2407.029984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2407.031837] Call Trace: [ 2407.032436] dump_stack+0x107/0x167 [ 2407.033258] dump_header+0x106/0x65e [ 2407.034095] oom_kill_process.cold+0x10/0x15 [ 2407.035081] out_of_memory+0x1149/0x1440 [ 2407.036096] ? oom_killer_disable+0x280/0x280 [ 2407.037187] ? mutex_trylock+0x237/0x2b0 [ 2407.038161] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2407.039802] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2407.041218] ? lock_acquire+0xd7/0x470 [ 2407.042153] ? warn_alloc+0x190/0x190 [ 2407.043097] __alloc_pages_nodemask+0x51d/0x600 [ 2407.044234] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2407.045528] ? find_get_entry+0x2c8/0x740 [ 2407.046550] alloc_pages_current+0x187/0x280 [ 2407.047477] __page_cache_alloc+0x2d2/0x360 [ 2407.048543] pagecache_get_page+0x2c7/0xc80 [ 2407.049477] filemap_fault+0x177d/0x2210 [ 2407.050479] ? read_cache_page_gfp+0x30/0x30 [ 2407.051426] ? replace_page_cache_page+0x1200/0x1200 [ 2407.052709] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2407.053979] ext4_filemap_fault+0x87/0xc0 [ 2407.054969] __do_fault+0x113/0x410 [ 2407.055859] handle_mm_fault+0x1e72/0x3520 [ 2407.056879] ? __pmd_alloc+0x5e0/0x5e0 [ 2407.057818] ? vmacache_find+0x55/0x2a0 [ 2407.058761] ? vmacache_update+0xce/0x140 [ 2407.059774] do_user_addr_fault+0x56e/0xc60 [ 2407.060814] exc_page_fault+0xa2/0x1a0 [ 2407.061743] ? asm_exc_page_fault+0x8/0x30 [ 2407.062753] asm_exc_page_fault+0x1e/0x30 [ 2407.063799] RIP: 0033:0x7f656cdc8116 [ 2407.064689] Code: Unable to access opcode bytes at RIP 0x7f656cdc80ec. [ 2407.066237] RSP: 002b:00007fff45404a70 EFLAGS: 00010293 [ 2407.067502] RAX: 0000000000000001 RBX: 0000561502f1a360 RCX: 00007f656cdc8116 [ 2407.069202] RDX: 0000000000000014 RSI: 0000561502f20880 RDI: 0000000000000008 [ 2407.070892] RBP: ffffffffffffffff R08: 0000000000000000 R09: 00007fff455e6080 [ 2407.072612] R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001 [ 2407.074301] R13: 0000000000000014 R14: 0000000000000000 R15: 0000000000000000 [ 2407.076229] Mem-Info: [ 2407.076848] active_anon:6694 inactive_anon:59626 isolated_anon:0 [ 2407.076848] active_file:25 inactive_file:9 isolated_file:0 [ 2407.076848] unevictable:0 dirty:0 writeback:0 [ 2407.076848] slab_reclaimable:9824 slab_unreclaimable:63621 [ 2407.076848] mapped:69651 shmem:117 pagetables:2177 bounce:0 [ 2407.076848] free:71494 free_pcp:329 free_cma:0 [ 2407.084282] Node 0 active_anon:26776kB inactive_anon:238504kB active_file:100kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278604kB dirty:0kB writeback:0kB shmem:468kB writeback_tmp:0kB kernel_stack:4928kB all_unreclaimable? yes [ 2407.089845] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:136kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2407.096049] lowmem_reserve[]: 0 1616 1616 1616 [ 2407.097213] Node 0 DMA32 free:389360kB min:13308kB low:14960kB high:16612kB reserved_highatomic:0KB active_anon:26776kB inactive_anon:238368kB active_file:380kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660504kB mlocked:0kB pagetables:8700kB bounce:0kB free_pcp:1328kB local_pcp:32kB free_cma:0kB [ 2407.104077] lowmem_reserve[]: 0 0 0 0 [ 2407.105193] Node 0 DMA: 2*4kB (M) 0*8kB 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 1*128kB (U) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6488kB [ 2407.108926] Node 0 DMA32: 621*4kB (UME) 216*8kB (UME) 99*16kB (UME) 238*32kB (UM) 103*64kB (U) 89*128kB (U) 83*256kB (U) 83*512kB (U) 64*1024kB (U) 38*2048kB (U) 50*4096kB (U) = 443300kB [ 2407.113341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2407.115451] 154 total pagecache pages [ 2407.116434] 0 pages in swap cache [ 2407.117327] Swap cache stats: add 0, delete 0, find 0/0 [ 2407.118676] Free swap = 0kB [ 2407.119456] Total swap = 0kB [ 2407.120264] 524158 pages RAM [ 2407.121013] 0 pages HighMem/MovableOnly [ 2407.122022] 105055 pages reserved [ 2407.122913] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=102,uid=0 [ 2407.127905] Out of memory (oom_kill_allocating_task): Killed process 102 (systemd-journal) total-vm:31940kB, anon-rss:912kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:88kB oom_score_adj:-250 [ 2407.221521] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 2407.225671] systemd[1]: systemd-journald.service: Failed with result 'oom-kill'. [ 2407.241985] systemd[1]: systemd-journald.service: Consumed 2.181s CPU time. [ 2407.256365] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 2407.302064] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2407.701630] journalctl invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2407.703837] CPU: 0 PID: 14490 Comm: journalctl Not tainted 5.10.183 #1 [ 2407.705266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2407.707050] Call Trace: [ 2407.707655] dump_stack+0x107/0x167 [ 2407.708447] dump_header+0x106/0x65e [ 2407.709264] oom_kill_process.cold+0x10/0x15 [ 2407.710219] out_of_memory+0x1149/0x1440 [ 2407.711112] ? oom_killer_disable+0x280/0x280 [ 2407.712089] ? mutex_trylock+0x237/0x2b0 [ 2407.712974] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2407.714259] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2407.715547] ? lock_acquire+0xd7/0x470 [ 2407.716416] ? warn_alloc+0x190/0x190 [ 2407.717279] __alloc_pages_nodemask+0x51d/0x600 [ 2407.718291] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2407.719606] ? find_get_entry+0x2c8/0x740 [ 2407.720515] alloc_pages_current+0x187/0x280 [ 2407.721480] __page_cache_alloc+0x2d2/0x360 [ 2407.722417] pagecache_get_page+0x2c7/0xc80 [ 2407.723363] filemap_fault+0x177d/0x2210 [ 2407.724263] ? read_cache_page_gfp+0x30/0x30 [ 2407.725224] ? replace_page_cache_page+0x1200/0x1200 [ 2407.726314] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2407.727464] ext4_filemap_fault+0x87/0xc0 [ 2407.728380] __do_fault+0x113/0x410 [ 2407.729180] handle_mm_fault+0x1e72/0x3520 [ 2407.730106] ? slab_free_freelist_hook+0xa9/0x180 [ 2407.731152] ? __pmd_alloc+0x5e0/0x5e0 [ 2407.732021] ? vmacache_find+0x55/0x2a0 [ 2407.732883] ? vmacache_update+0xce/0x140 [ 2407.733798] do_user_addr_fault+0x56e/0xc60 [ 2407.734750] exc_page_fault+0xa2/0x1a0 [ 2407.735617] ? asm_exc_page_fault+0x8/0x30 [ 2407.736537] asm_exc_page_fault+0x1e/0x30 [ 2407.737428] RIP: 0033:0x7efcaa2c4000 [ 2407.738240] Code: Unable to access opcode bytes at RIP 0x7efcaa2c3fd6. [ 2407.739665] RSP: 002b:00007ffe95237678 EFLAGS: 00010206 [ 2407.740826] RAX: 00007efcaa2c4000 RBX: 00007efcaa302a20 RCX: 000000000000002f [ 2407.742375] RDX: 00007ffe95237710 RSI: 00007ffe952376f8 RDI: 0000000000000002 [ 2407.743943] RBP: 0000000000000002 R08: 000055da0b88e2d0 R09: 00007efcaa72cbe0 [ 2407.745489] R10: 00000000000002b0 R11: 0000000000000246 R12: 00007ffe952376f8 [ 2407.747044] R13: 00007ffe95237710 R14: 00007efcaa9fe180 R15: 0000000000000000 [ 2407.748729] Mem-Info: [ 2407.749334] active_anon:6695 inactive_anon:59541 isolated_anon:0 [ 2407.749334] active_file:32 inactive_file:35 isolated_file:0 [ 2407.749334] unevictable:0 dirty:14 writeback:0 [ 2407.749334] slab_reclaimable:9755 slab_unreclaimable:63248 [ 2407.749334] mapped:69669 shmem:117 pagetables:2171 bounce:0 [ 2407.749334] free:2516 free_pcp:0 free_cma:0 [ 2407.756077] Node 0 active_anon:26780kB inactive_anon:238164kB active_file:128kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278676kB dirty:56kB writeback:0kB shmem:468kB writeback_tmp:0kB kernel_stack:4864kB all_unreclaimable? no [ 2407.761072] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:156kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2407.766731] lowmem_reserve[]: 0 1616 1616 1616 [ 2407.767790] Node 0 DMA32 free:3576kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:26780kB inactive_anon:238008kB active_file:60kB inactive_file:212kB unevictable:0kB writepending:56kB present:2080640kB managed:1660504kB mlocked:0kB pagetables:8672kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2407.773888] lowmem_reserve[]: 0 0 0 0 [ 2407.774772] Node 0 DMA: 1*4kB (M) 3*8kB (UM) 2*16kB (UM) 3*32kB (UM) 3*64kB (UM) 2*128kB (UM) 1*256kB (U) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6492kB [ 2407.778123] Node 0 DMA32: 695*4kB (UME) 128*8kB (UME) 17*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4076kB [ 2407.781103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2407.782934] 178 total pagecache pages [ 2407.783788] 0 pages in swap cache [ 2407.784555] Swap cache stats: add 0, delete 0, find 0/0 [ 2407.785715] Free swap = 0kB [ 2407.786387] Total swap = 0kB [ 2407.787035] 524158 pages RAM [ 2407.787729] 0 pages HighMem/MovableOnly [ 2407.788599] 105055 pages reserved [ 2407.789365] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journal-flush.service,task=journalctl,pid=14490,uid=0 [ 2407.794334] Out of memory (oom_kill_allocating_task): Killed process 14490 (journalctl) total-vm:13156kB, anon-rss:596kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:0 [ 2407.866005] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2407.867470] CPU: 1 PID: 177 Comm: in:imklog Not tainted 5.10.183 #1 [ 2407.868391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2407.869583] Call Trace: [ 2407.870000] dump_stack+0x107/0x167 [ 2407.870539] dump_header+0x106/0x65e [ 2407.871132] oom_kill_process.cold+0x10/0x15 [ 2407.871792] out_of_memory+0x1149/0x1440 [ 2407.872405] ? oom_killer_disable+0x280/0x280 [ 2407.873077] ? mutex_trylock+0x237/0x2b0 [ 2407.873684] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2407.874567] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2407.875451] ? lock_acquire+0xd7/0x470 [ 2407.876050] ? warn_alloc+0x190/0x190 [ 2407.876643] __alloc_pages_nodemask+0x51d/0x600 [ 2407.877341] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2407.878234] ? find_get_entry+0x2c8/0x740 [ 2407.878860] alloc_pages_current+0x187/0x280 [ 2407.879515] __page_cache_alloc+0x2d2/0x360 [ 2407.880176] pagecache_get_page+0x2c7/0xc80 [ 2407.880853] filemap_fault+0x177d/0x2210 [ 2407.881488] ? read_cache_page_gfp+0x30/0x30 [ 2407.882181] ? replace_page_cache_page+0x1200/0x1200 [ 2407.882973] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2407.883806] ext4_filemap_fault+0x87/0xc0 [ 2407.884416] __do_fault+0x113/0x410 [ 2407.884961] handle_mm_fault+0x1e72/0x3520 [ 2407.885590] ? fsnotify+0xf50/0xf50 [ 2407.886135] ? __pmd_alloc+0x5e0/0x5e0 [ 2407.886722] ? vmacache_find+0x55/0x2a0 [ 2407.887322] do_user_addr_fault+0x56e/0xc60 [ 2407.887990] exc_page_fault+0xa2/0x1a0 [ 2407.888571] ? asm_exc_page_fault+0x8/0x30 [ 2407.889199] asm_exc_page_fault+0x1e/0x30 [ 2407.889807] RIP: 0033:0x7fb07af0b08c [ 2407.890360] Code: Unable to access opcode bytes at RIP 0x7fb07af0b062. [ 2407.891327] RSP: 002b:00007fb07a4a74d0 EFLAGS: 00010246 [ 2407.892151] RAX: 00000000000009dd RBX: 0000000000000000 RCX: 00007fb07af0b08c [ 2407.893354] RDX: 0000000000001fa0 RSI: 00007fb07a4a7d00 RDI: 0000000000000005 [ 2407.894417] RBP: 000055e8cad054c0 R08: 0000000000000000 R09: 000055e8cad01e88 [ 2407.895475] R10: 00007fb06c03d5d0 R11: 0000000000000246 R12: 00007fb07a4a7d00 [ 2407.896550] R13: 0000000000001fa0 R14: 00007fb07a4a7d00 R15: 00007fb07a4a7d4f [ 2407.897731] Mem-Info: [ 2407.898115] active_anon:6695 inactive_anon:59394 isolated_anon:0 [ 2407.898115] active_file:47 inactive_file:10 isolated_file:0 [ 2407.898115] unevictable:0 dirty:14 writeback:0 [ 2407.898115] slab_reclaimable:9755 slab_unreclaimable:63248 [ 2407.898115] mapped:69669 shmem:117 pagetables:2171 bounce:0 [ 2407.898115] free:2343 free_pcp:336 free_cma:0 [ 2407.903335] Node 0 active_anon:26780kB inactive_anon:237576kB active_file:188kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278676kB dirty:56kB writeback:0kB shmem:468kB writeback_tmp:0kB kernel_stack:4832kB all_unreclaimable? yes [ 2407.906803] Node 0 DMA free:6512kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:140kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2407.911444] lowmem_reserve[]: 0 1616 1616 1616 [ 2407.912236] Node 0 DMA32 free:3868kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:26780kB inactive_anon:237504kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:56kB present:2080640kB managed:1660504kB mlocked:0kB pagetables:8672kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2407.916475] lowmem_reserve[]: 0 0 0 0 [ 2407.917093] Node 0 DMA: 2*4kB (M) 1*8kB (U) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (U) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6512kB [ 2407.919408] Node 0 DMA32: 601*4kB (UME) 143*8kB (UME) 23*16kB (UM) 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3948kB [ 2407.921467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2407.922732] 178 total pagecache pages [ 2407.923341] 0 pages in swap cache [ 2407.923874] Swap cache stats: add 0, delete 0, find 0/0 [ 2407.924664] Free swap = 0kB [ 2407.925110] Total swap = 0kB [ 2407.925576] 524158 pages RAM [ 2407.926025] 0 pages HighMem/MovableOnly [ 2407.926641] 105055 pages reserved [ 2407.927168] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=177,uid=0 [ 2407.930012] Out of memory (oom_kill_allocating_task): Killed process 174 (rsyslogd) total-vm:220876kB, anon-rss:968kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2408.562422] systemd[1]: rsyslog.service: A process of this unit has been killed by the OOM killer. [ 2408.576296] systemd[1]: systemd-journal-flush.service: A process of this unit has been killed by the OOM killer. [ 2408.583472] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2408.589889] systemd[1]: rsyslog.service: Failed with result 'oom-kill'. [ 2408.612663] systemd[1]: systemd-journal-flush.service: Control process exited, code=killed, status=9/KILL [ 2408.616473] systemd[1]: systemd-journal-flush.service: Failed with result 'oom-kill'. [ 2408.630240] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2408.632657] systemd[1]: Stopped Journal Service. [ 2408.634094] systemd[1]: systemd-journald.service: Consumed 2.181s CPU time. [ 2408.678296] systemd[1]: Starting Journal Service... [ 2408.777404] systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 1. [ 2408.778700] systemd[1]: Stopped System Logging Service. [ 2408.827236] systemd[1]: Starting System Logging Service... [ 2408.927009] systemd[1]: Started System Logging Service. [ 2408.954209] systemd-journald[14492]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2409.105410] systemd[1]: Started Journal Service. [ 2409.221610] systemd-journald[14492]: Received client request to flush runtime journal. 16:41:02 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:41:02 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x5c000) dup2(r0, 0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:41:02 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:41:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x8000000f) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:41:02 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:41:02 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:41:02 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:41:02 executing program 1: clock_settime(0x0, &(0x7f0000000100)) 16:41:02 executing program 1: clock_settime(0x0, 0x0) 16:41:02 executing program 1: clock_settime(0x0, 0x0) [ 2423.416893] nfs: Unknown parameter 'x' 16:41:02 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x3}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:41:02 executing program 1: clock_settime(0x0, 0x0) 16:41:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) 16:41:03 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x4}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:41:03 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:41:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 2423.803540] blktrace: Concurrent blktraces are not allowed on sg0 16:41:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000002c0), 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) 16:41:16 executing program 1: clock_settime(0x0, &(0x7f0000000100)) (fail_nth: 1) 16:41:16 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6c03, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) [ 2437.220571] FAULT_INJECTION: forcing a failure. [ 2437.220571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2437.223327] CPU: 1 PID: 14563 Comm: syz-executor.1 Not tainted 5.10.183 #1 [ 2437.224901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2437.226778] Call Trace: [ 2437.227382] dump_stack+0x107/0x167 [ 2437.228240] should_fail.cold+0x5/0xa [ 2437.229081] _copy_from_user+0x2e/0x1b0 [ 2437.229947] get_timespec64+0x75/0x190 [ 2437.230793] ? put_timespec64+0x130/0x130 [ 2437.231695] ? rcu_read_lock_any_held+0x75/0xa0 [ 2437.232712] ? vfs_write+0x354/0xa70 [ 2437.233527] __x64_sys_clock_settime+0x15a/0x270 [ 2437.234551] ? exit_itimers+0x440/0x440 [ 2437.235430] do_syscall_64+0x33/0x40 16:41:16 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:41:16 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:41:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000010) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) [ 2437.236356] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2437.237543] RIP: 0033:0x7eff78263b19 [ 2437.238354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2437.242245] RSP: 002b:00007eff757d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 2437.243898] RAX: ffffffffffffffda RBX: 00007eff78376f60 RCX: 00007eff78263b19 [ 2437.245413] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 2437.246951] RBP: 00007eff757d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2437.248505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2437.250042] R13: 00007ffd65684c9f R14: 00007eff757d9300 R15: 0000000000022000 16:41:16 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:41:16 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x5c000) dup2(r0, 0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:41:16 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x5}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:41:16 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6c03, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:41:16 executing program 1: clock_settime(0x0, &(0x7f0000000100)) (fail_nth: 2) [ 2437.360989] FAULT_INJECTION: forcing a failure. [ 2437.360989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2437.363587] CPU: 1 PID: 14587 Comm: syz-executor.1 Not tainted 5.10.183 #1 [ 2437.365061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2437.366810] Call Trace: [ 2437.367377] dump_stack+0x107/0x167 [ 2437.368176] should_fail.cold+0x5/0xa [ 2437.368992] _copy_to_user+0x2e/0x180 [ 2437.369808] simple_read_from_buffer+0xcc/0x160 [ 2437.370799] proc_fail_nth_read+0x198/0x230 [ 2437.371738] ? proc_sessionid_read+0x230/0x230 [ 2437.372736] ? security_file_permission+0x24e/0x570 [ 2437.373816] ? perf_trace_initcall_start+0x101/0x380 [ 2437.374923] ? proc_sessionid_read+0x230/0x230 [ 2437.375919] vfs_read+0x228/0x580 [ 2437.376677] ksys_read+0x12d/0x260 [ 2437.377448] ? vfs_write+0xa70/0xa70 [ 2437.378273] do_syscall_64+0x33/0x40 [ 2437.379086] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2437.380213] RIP: 0033:0x7eff7821669c [ 2437.381020] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2437.384975] RSP: 002b:00007eff757d9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2437.386618] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007eff7821669c [ 2437.388165] RDX: 000000000000000f RSI: 00007eff757d91e0 RDI: 0000000000000003 [ 2437.389711] RBP: 00007eff757d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2437.391252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2437.392801] R13: 00007ffd65684c9f R14: 00007eff757d9300 R15: 0000000000022000 [ 2437.407167] nfs: Unknown parameter 'x' 16:41:16 executing program 1: clock_settime(0x0, &(0x7f0000000100)) 16:41:16 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x6}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:41:16 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6c03, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:41:16 executing program 1: clock_settime(0xb, &(0x7f0000000100)) 16:41:16 executing program 3: clock_settime(0x0, &(0x7f0000000100)) (fail_nth: 1) 16:41:31 executing program 3: clock_settime(0x0, &(0x7f0000000100)) 16:41:31 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:41:31 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:41:31 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:41:31 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x8}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:41:31 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x0, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:41:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x8000001c) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:41:31 executing program 1: clock_settime(0xb00, &(0x7f0000000100)) 16:41:32 executing program 3: clock_settime(0xb, &(0x7f0000000100)) 16:41:32 executing program 1: clock_settime(0x4000, &(0x7f0000000100)) [ 2452.840976] nfs: Unknown parameter 'x' 16:41:32 executing program 1: clock_settime(0x1000000, &(0x7f0000000100)) 16:41:32 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x14}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:41:32 executing program 3: clock_settime(0xb00, &(0x7f0000000100)) 16:41:32 executing program 1: clock_settime(0xb000000, &(0x7f0000000100)) 16:41:32 executing program 1: clock_settime(0x3b9ac9ff, &(0x7f0000000100)) 16:41:32 executing program 3: clock_settime(0x4000, &(0x7f0000000100)) 16:41:32 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x5f}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:41:32 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) 16:41:46 executing program 3: clock_settime(0x1000000, &(0x7f0000000100)) 16:41:46 executing program 1: clock_settime(0x40000000, &(0x7f0000000100)) 16:41:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000802) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:41:46 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x80000}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0x1ff}]}, 0xc, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) readv(r0, &(0x7f0000001300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x31, 0x88000) copy_file_range(r3, &(0x7f0000000180)=0xffffffffffffff01, r0, &(0x7f00000001c0)=0x4, 0xdaeb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x7, &(0x7f0000000600)={0x8, 0x0, 0xfffffffc}) 16:41:46 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x0) 16:41:46 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x5c000) dup2(r0, r3) socket$inet6(0xa, 0x0, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffe2a, 0x4000015) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r0, 0x101, 0x2, 0x5, 0x4, 0x1, {0x800}}, 0x40) r6 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9bdc45e6142abc54eaf64db723e747d9555b9e78b78d30b2ae64d3ac18c8d289bad1f3268b224ebae701fbae7a578ef1fd86a41ea0ba5d468f291bf6b00a4b4978fb93a5fe29cc3e8c0ef57cd944d16c23a19ecf31c8e148b52e4dea85683ba2414818", 0x63}, {&(0x7f0000000240)="d44f54e23978a5483c3279c3a94c4e782e64c4c7fd094d15988f6841155426df635243e1b04efd0a6673f8daaac6f866b56fda43194bb13d62525c2f036ecf0edbc371a394587370526cb9cc7fe59a722832ba15ed7d4aafbe1214885a6526ae2739e123725c9f387415f2c5112dd154425ffc6888", 0x75, 0x2}, {&(0x7f00000002c0)="83f2d0b56acae3eab8b7e1238bfbe7208bf9ee3f5e91fb4fd5c14697fa3d9fe4c2a845165b4d80a5505feb942db7847c2391ed8a1ffc90cea86c003919152659fbfffba18acde036778de4b93ea75068d57596115afb91cda63ef0509cad98345af55877b14899", 0x67, 0x80000001}, {&(0x7f0000000340)="6ef65c55232c0db3c46a4c7999746ef6534ecf8c11ee26666d269432c7b0c002ce9137a30cd41466499515dbdba904a67ae2cdfff4ce303b5f86784f71301006454cfbc62722dc38e4ac9e579faa4ebc859c420ef8c42cf245ee2a7e2c16c571f5feb08ff661a364a50106bfb17473b4", 0x70, 0x800}], 0x4043, &(0x7f0000000440)=ANY=[@ANYBLOB='x,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e1ff69643e", @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d3ab82e2d2b2f5d2c00"]) execveat(r6, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000500)=',[,!(\x00', &(0x7f0000000540)='%%/\x00', &(0x7f0000000580)='.)\x00', &(0x7f00000005c0)=',\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='%\xd3\x00'], 0x1c00) r7 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) 16:41:46 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x9, 0x301c42) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) fallocate(r5, 0x20, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x180000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}, {@version_L}, {@msize={'msize', 0x3d, 0x401}}, {@access_user}], [{@dont_appraise}]}}) 16:41:46 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendfile(r0, r2, 0x0, 0x80000004) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x40, 0x1, 0x3, 0xff}, {0xa8, 0x29, 0x3f, 0xffff0001}, {0x8216, 0x1f, 0x0, 0x5}, {0x9, 0x4, 0x6, 0x20}]}) [ 2467.002546] blktrace: Concurrent blktraces are not allowed on sg0 16:41:46 executing program 3: clock_settime(0xb000000, &(0x7f0000000100)) 16:41:46 executing program 1: clock_settime(0xffc99a3b, &(0x7f0000000100)) [ 2467.132796] nfs: Unknown parameter 'x' 16:41:46 executing program 3: clock_settime(0x3b9ac9ff, &(0x7f0000000100)) 16:41:46 executing program 1: clock_settime(0x1ed5d7403, &(0x7f0000000100)) 16:41:46 executing program 3: clock_settime(0x40000000, &(0x7f0000000100)) 16:41:46 executing program 1: clock_settime(0x100000000000000, &(0x7f0000000100)) [ 2469.169143] systemd-udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000 [ 2469.171332] CPU: 1 PID: 117 Comm: systemd-udevd Not tainted 5.10.183 #1 [ 2469.172673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2469.174338] Call Trace: [ 2469.174873] dump_stack+0x107/0x167 [ 2469.175609] dump_header+0x106/0x65e [ 2469.176398] oom_kill_process.cold+0x10/0x15 [ 2469.177288] out_of_memory+0x358/0x1440 [ 2469.178106] ? oom_killer_disable+0x280/0x280 [ 2469.179129] ? mutex_trylock+0x237/0x2b0 [ 2469.179954] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2469.181169] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2469.182461] ? lock_acquire+0xd7/0x470 [ 2469.183318] ? warn_alloc+0x190/0x190 [ 2469.184157] __alloc_pages_nodemask+0x51d/0x600 [ 2469.185180] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2469.186566] ? find_get_entry+0x2c8/0x740 [ 2469.187469] alloc_pages_current+0x187/0x280 [ 2469.188366] __page_cache_alloc+0x2d2/0x360 [ 2469.189253] pagecache_get_page+0x2c7/0xc80 [ 2469.190202] filemap_fault+0x177d/0x2210 [ 2469.191102] ? read_cache_page_gfp+0x30/0x30 [ 2469.191999] ? replace_page_cache_page+0x1200/0x1200 [ 2469.193120] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2469.194259] ext4_filemap_fault+0x87/0xc0 [ 2469.195119] __do_fault+0x113/0x410 [ 2469.195960] handle_mm_fault+0x1e72/0x3520 [ 2469.196869] ? find_held_lock+0x2c/0x110 [ 2469.197750] ? __pmd_alloc+0x5e0/0x5e0 [ 2469.198608] ? vmacache_find+0x55/0x2a0 [ 2469.199412] ? vmacache_update+0xce/0x140 [ 2469.200361] do_user_addr_fault+0x56e/0xc60 [ 2469.201323] exc_page_fault+0xa2/0x1a0 [ 2469.202142] ? asm_exc_page_fault+0x8/0x30 [ 2469.203045] asm_exc_page_fault+0x1e/0x30 [ 2469.203938] RIP: 0033:0x7f49d52904c0 [ 2469.204701] Code: Unable to access opcode bytes at RIP 0x7f49d5290496. [ 2469.206011] RSP: 002b:00007ffeea5aa838 EFLAGS: 00010246 [ 2469.207178] RAX: 00007f49d4e8f6c0 RBX: 00007f49d4e8f6c0 RCX: 0000000000000000 [ 2469.208772] RDX: 0000000000000000 RSI: 00007ffeea5aa850 RDI: 000055d3775f1cd6 [ 2469.210276] RBP: 000055d3775f1cd6 R08: 000055d3775f1cd0 R09: 000055d3775fac42 [ 2469.211877] R10: c86d6f545140550e R11: 0000000000000002 R12: 00007ffeea5aa884 [ 2469.213391] R13: 000055d3775f1cd6 R14: 000000000000002b R15: 000055d3775da500 [ 2469.214988] Mem-Info: [ 2469.215584] active_anon:6698 inactive_anon:59665 isolated_anon:0 [ 2469.215584] active_file:441 inactive_file:317 isolated_file:16 [ 2469.215584] unevictable:0 dirty:0 writeback:0 [ 2469.215584] slab_reclaimable:7653 slab_unreclaimable:67252 [ 2469.215584] mapped:70095 shmem:117 pagetables:2176 bounce:0 [ 2469.215584] free:3046 free_pcp:23 free_cma:0 [ 2469.222189] Node 0 active_anon:26792kB inactive_anon:238660kB active_file:1848kB inactive_file:1408kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:280716kB dirty:0kB writeback:0kB shmem:468kB writeback_tmp:0kB kernel_stack:4896kB all_unreclaimable? no [ 2469.227260] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2469.232860] lowmem_reserve[]: 0 1616 1616 1616 [ 2469.233844] Node 0 DMA32 free:5676kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:26792kB inactive_anon:238660kB active_file:1532kB inactive_file:1084kB unevictable:0kB writepending:0kB present:2080640kB managed:1660504kB mlocked:0kB pagetables:8704kB bounce:0kB free_pcp:284kB local_pcp:16kB free_cma:0kB [ 2469.239891] lowmem_reserve[]: 0 0 0 0 [ 2469.240734] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 2469.243534] Node 0 DMA32: 404*4kB (UME) 206*8kB (UME) 59*16kB (UME) 22*32kB (UM) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5168kB [ 2469.246432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2469.248127] 881 total pagecache pages [ 2469.248927] 0 pages in swap cache [ 2469.249642] Swap cache stats: add 0, delete 0, find 0/0 [ 2469.250722] Free swap = 0kB [ 2469.251366] Total swap = 0kB [ 2469.251970] 524158 pages RAM [ 2469.252604] 0 pages HighMem/MovableOnly [ 2469.253421] 105055 pages reserved [ 2469.254233] Unreclaimable slab info: [ 2469.255449] Name Used Total [ 2469.256655] pid_3 7KB 7KB [ 2469.257750] pid_2 82KB 82KB [ 2469.258842] IEEE-802.15.4-MAC 63KB 63KB [ 2469.259927] IEEE-802.15.4-RAW 31KB 31KB [ 2469.261025] p9_req_t 8KB 8KB [ 2469.262112] ip6-frags 7KB 7KB [ 2469.263197] fib6_nodes 32KB 32KB [ 2469.264292] ip6_dst_cache 48KB 48KB [ 2469.265472] PINGv6 63KB 63KB [ 2469.266559] RAWv6 283KB 283KB [ 2469.267683] UDPLITEv6 62KB 62KB [ 2469.268808] UDPv6 62KB 62KB [ 2469.269892] tw_sock_TCPv6 15KB 15KB [ 2469.270978] request_sock_TCPv6 7KB 7KB [ 2469.272176] TCPv6 62KB 62KB [ 2469.273279] scsi_sense_cache 4KB 4KB [ 2469.274460] sd_ext_cdb 3KB 3KB [ 2469.275546] virtio_scsi_cmd 16KB 16KB [ 2469.276638] sgpool-128 59KB 59KB [ 2469.277721] sgpool-64 63KB 63KB [ 2469.278808] sgpool-32 204KB 204KB [ 2469.279898] sgpool-16 83KB 90KB [ 2469.280984] sgpool-8 60KB 60KB [ 2469.282077] io_kiocb 26KB 41KB [ 2469.283169] mqueue_inode_cache 62KB 62KB [ 2469.284293] nfs_commit_data 15KB 15KB [ 2469.285373] nfs_write_data 47KB 47KB [ 2469.286460] jbd2_inode 11KB 11KB [ 2469.287541] ext4_system_zone 7KB 7KB [ 2469.288636] ext4_io_end_vec 7KB 7KB [ 2469.289717] ext4_bio_post_read_ctx 15KB 15KB [ 2469.290896] kioctx 31KB 31KB [ 2469.291978] aio_kiocb 7KB 7KB [ 2469.293095] dio 277KB 277KB [ 2469.294187] bio-2 4KB 4KB [ 2469.295287] fasync_cache 7KB 7KB [ 2469.296388] pid_namespace 7KB 7KB [ 2469.297498] posix_timers_cache 15KB 15KB [ 2469.298608] rpc_buffers 31KB 31KB [ 2469.299718] rpc_tasks 3KB 3KB [ 2469.300808] UNIX 416KB 416KB [ 2469.301897] UDP-Lite 63KB 63KB [ 2469.302976] tcp_bind_bucket 8KB 8KB [ 2469.304061] inet_peer_cache 4KB 4KB [ 2469.305175] xfrm_state 32KB 32KB [ 2469.306268] ip_fib_trie 8KB 8KB [ 2469.307347] ip_fib_alias 15KB 15KB [ 2469.308446] ip_dst_cache 48KB 48KB [ 2469.309527] PING 62KB 62KB [ 2469.310619] RAW 125KB 125KB [ 2469.311701] UDP 231KB 346KB [ 2469.312810] tw_sock_TCP 15KB 15KB [ 2469.313897] request_sock_TCP 15KB 15KB [ 2469.314987] TCP 60KB 60KB [ 2469.316077] hugetlbfs_inode_cache 30KB 30KB [ 2469.317247] bio-1 11KB 11KB [ 2469.318337] eventpoll_pwq 27KB 27KB [ 2469.319431] eventpoll_epi 55KB 55KB [ 2469.320529] inotify_inode_mark 58KB 58KB [ 2469.321650] request_queue 90KB 90KB [ 2469.322742] blkdev_ioc 45KB 45KB [ 2469.323829] bio-0 464KB 464KB [ 2469.324938] biovec-max 1079KB 1160KB [ 2469.326049] biovec-64 236KB 236KB [ 2469.327177] biovec-16 93KB 93KB [ 2469.328284] user_namespace 31KB 31KB [ 2469.329405] uid_cache 8KB 8KB [ 2469.330562] dmaengine-unmap-2 4KB 4KB [ 2469.331682] audit_buffer 7KB 7KB [ 2469.332808] skbuff_fclone_cache 38KB 60KB [ 2469.333939] skbuff_head_cache 123KB 123KB [ 2469.335024] file_lock_cache 70KB 70KB [ 2469.336132] file_lock_ctx 7KB 7KB [ 2469.337250] fsnotify_mark_connector 32KB 32KB [ 2469.338441] net_namespace 143KB 143KB [ 2469.339529] task_delay_info 79KB 135KB [ 2469.340629] taskstats 46KB 46KB [ 2469.341727] proc_dir_entry 434KB 461KB [ 2469.342818] pde_opener 43KB 43KB [ 2469.343901] seq_file 75KB 75KB [ 2469.345042] sigqueue 122KB 122KB [ 2469.346140] shmem_inode_cache 1309KB 1383KB [ 2469.347284] kernfs_iattrs_cache 266KB 266KB [ 2469.348428] kernfs_node_cache 5879KB 5923KB [ 2469.349562] mnt_cache 220KB 220KB [ 2469.350658] filp 2489KB 2535KB [ 2469.351797] names_cache 21271KB 21607KB [ 2469.352899] hashtab_node 278KB 278KB [ 2469.353993] ebitmap_node 1149KB 1149KB [ 2469.355079] avtab_node 4976KB 4976KB [ 2469.356172] avc_node 39KB 39KB [ 2469.357300] lsm_inode_cache 2658KB 3067KB [ 2469.358393] lsm_file_cache 173KB 192KB [ 2469.359478] key_jar 39KB 39KB [ 2469.360577] uts_namespace 15KB 15KB [ 2469.361668] nsproxy 7KB 7KB [ 2469.362808] vm_area_struct 1412KB 1556KB [ 2469.363901] mm_struct 288KB 535KB [ 2469.365043] fs_cache 40KB 68KB [ 2469.366167] files_cache 173KB 302KB [ 2469.367293] signal_cache 393KB 524KB [ 2469.368394] sighand_cache 351KB 420KB [ 2469.369510] task_struct 1581KB 1890KB [ 2469.370597] cred_jar 170KB 188KB [ 2469.371693] anon_vma_chain 368KB 417KB [ 2469.372784] anon_vma 374KB 374KB [ 2469.373875] pid 59KB 67KB [ 2469.374960] Acpi-Operand 76KB 110KB [ 2469.376166] Acpi-ParseExt 27KB 27KB [ 2469.377257] Acpi-Parse 47KB 63KB [ 2469.378360] Acpi-State 192KB 208KB [ 2469.379449] Acpi-Namespace 24KB 24KB [ 2469.380554] shared_policy_node 8KB 8KB [ 2469.381770] numa_policy 7KB 7KB [ 2469.382882] trace_event_file 163KB 163KB [ 2469.383972] ftrace_event_field 280KB 280KB [ 2469.385186] pool_workqueue 40KB 40KB [ 2469.386290] task_group 16KB 16KB [ 2469.387411] vmap_area 211KB 263KB [ 2469.388553] page->ptl 307KB 334KB [ 2469.389654] kmemleak_scan_area 107KB 175KB [ 2469.391638] kmemleak_object 139565KB 154821KB [ 2469.392850] kmalloc-8k 4944KB 5056KB [ 2469.393943] kmalloc-4k 8400KB 8800KB [ 2469.395034] kmalloc-2k 5144KB 5376KB [ 2469.396175] kmalloc-1k 2668KB 3456KB [ 2469.397376] kmalloc-512 2117KB 4432KB [ 2469.398480] kmalloc-256 1368KB 1488KB [ 2469.399599] kmalloc-192 581KB 888KB [ 2469.400725] kmalloc-128 520KB 676KB [ 2469.401940] kmalloc-96 340KB 624KB [ 2469.403057] kmalloc-64 942KB 1412KB [ 2469.404318] kmalloc-32 857KB 888KB [ 2469.405415] kmalloc-16 372KB 372KB [ 2469.406627] kmalloc-8 334KB 334KB [ 2469.407939] kmem_cache_node 47KB 47KB [ 2469.409117] kmem_cache 75KB 75KB [ 2469.410455] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=14691,uid=0 [ 2469.413637] Out of memory: Killed process 14712 (syz-executor.2) total-vm:93940kB, anon-rss:460kB, file-rss:35504kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 2469.474533] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 2469.476713] CPU: 1 PID: 14492 Comm: systemd-journal Not tainted 5.10.183 #1 [ 2469.478118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2469.479775] Call Trace: [ 2469.480319] dump_stack+0x107/0x167 [ 2469.481065] dump_header+0x106/0x65e [ 2469.481830] oom_kill_process.cold+0x10/0x15 [ 2469.482728] out_of_memory+0x1149/0x1440 [ 2469.483570] ? oom_killer_disable+0x280/0x280 [ 2469.484496] ? mutex_trylock+0x237/0x2b0 [ 2469.485310] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2469.486509] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2469.487694] ? lock_acquire+0xd7/0x470 [ 2469.488492] ? warn_alloc+0x190/0x190 [ 2469.489291] __alloc_pages_nodemask+0x51d/0x600 [ 2469.490230] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2469.491436] ? find_get_entry+0x2c8/0x740 [ 2469.492302] alloc_pages_current+0x187/0x280 [ 2469.493189] __page_cache_alloc+0x2d2/0x360 [ 2469.494067] pagecache_get_page+0x2c7/0xc80 [ 2469.494941] filemap_fault+0x177d/0x2210 [ 2469.495776] ? read_cache_page_gfp+0x30/0x30 [ 2469.496671] ? replace_page_cache_page+0x1200/0x1200 [ 2469.497689] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2469.498762] ext4_filemap_fault+0x87/0xc0 [ 2469.499677] __do_fault+0x113/0x410 [ 2469.500428] handle_mm_fault+0x1e72/0x3520 [ 2469.501288] ? find_held_lock+0x2c/0x110 [ 2469.502106] ? __pmd_alloc+0x5e0/0x5e0 [ 2469.502905] ? vmacache_find+0x55/0x2a0 [ 2469.503699] ? vmacache_update+0xce/0x140 [ 2469.504545] do_user_addr_fault+0x56e/0xc60 [ 2469.505427] exc_page_fault+0xa2/0x1a0 [ 2469.506213] ? asm_exc_page_fault+0x8/0x30 [ 2469.507062] asm_exc_page_fault+0x1e/0x30 [ 2469.507890] RIP: 0033:0x7fa9eeb03a09 [ 2469.508647] Code: Unable to access opcode bytes at RIP 0x7fa9eeb039df. [ 2469.509966] RSP: 002b:00007ffe133d72b0 EFLAGS: 00010202 [ 2469.511035] RAX: 0000000000000001 RBX: 000055f0a3a334a0 RCX: 00007fa9ee854116 [ 2469.512480] RDX: 0000000000000014 RSI: 000055f0a3a38540 RDI: 0000000000000000 [ 2469.513905] RBP: ffffffffffffffff R08: 0000000000000000 R09: 00007ffe133e4080 [ 2469.515335] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000001 [ 2469.516765] R13: 0000000000000014 R14: 0000000000000000 R15: 0000000000000000 [ 2469.518305] Mem-Info: [ 2469.518823] active_anon:6698 inactive_anon:59665 isolated_anon:0 [ 2469.518823] active_file:214 inactive_file:136 isolated_file:0 [ 2469.518823] unevictable:0 dirty:0 writeback:0 [ 2469.518823] slab_reclaimable:7653 slab_unreclaimable:67256 [ 2469.518823] mapped:69867 shmem:117 pagetables:2176 bounce:0 [ 2469.518823] free:2741 free_pcp:171 free_cma:0 [ 2469.525104] Node 0 active_anon:26792kB inactive_anon:238660kB active_file:856kB inactive_file:544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:279468kB dirty:0kB writeback:0kB shmem:468kB writeback_tmp:0kB kernel_stack:4896kB all_unreclaimable? no [ 2469.529760] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2469.534891] lowmem_reserve[]: 0 1616 1616 1616 [ 2469.535884] Node 0 DMA32 free:3472kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:26792kB inactive_anon:238660kB active_file:860kB inactive_file:704kB unevictable:0kB writepending:0kB present:2080640kB managed:1660504kB mlocked:0kB pagetables:8704kB bounce:0kB free_pcp:700kB local_pcp:136kB free_cma:0kB [ 2469.541575] lowmem_reserve[]: 0 0 0 0 [ 2469.542411] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 2469.545100] Node 0 DMA32: 602*4kB (ME) 86*8kB (UME) 25*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3496kB [ 2469.547924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2469.549761] 426 total pagecache pages [ 2469.550592] 0 pages in swap cache [ 2469.551349] Swap cache stats: add 0, delete 0, find 0/0 [ 2469.552524] Free swap = 0kB [ 2469.553200] Total swap = 0kB [ 2469.553853] 524158 pages RAM [ 2469.554519] 0 pages HighMem/MovableOnly [ 2469.555391] 105055 pages reserved [ 2469.556131] Unreclaimable slab info: [ 2469.556967] Name Used Total [ 2469.558170] pid_3 7KB 7KB [ 2469.559322] pid_2 82KB 82KB [ 2469.560459] IEEE-802.15.4-MAC 63KB 63KB [ 2469.561616] IEEE-802.15.4-RAW 31KB 31KB [ 2469.562746] p9_req_t 8KB 8KB [ 2469.563916] ip6-frags 7KB 7KB [ 2469.565067] fib6_nodes 32KB 32KB [ 2469.566219] ip6_dst_cache 48KB 48KB [ 2469.567358] PINGv6 63KB 63KB [ 2469.568550] RAWv6 283KB 283KB [ 2469.569687] UDPLITEv6 62KB 62KB [ 2469.570841] UDPv6 62KB 62KB [ 2469.571969] tw_sock_TCPv6 15KB 15KB [ 2469.573123] request_sock_TCPv6 7KB 7KB [ 2469.574276] TCPv6 62KB 62KB [ 2469.575425] scsi_sense_cache 4KB 4KB [ 2469.576593] sd_ext_cdb 3KB 3KB [ 2469.577748] virtio_scsi_cmd 16KB 16KB [ 2469.578910] sgpool-128 59KB 59KB [ 2469.580061] sgpool-64 63KB 63KB [ 2469.581247] sgpool-32 220KB 220KB [ 2469.582401] sgpool-16 90KB 90KB [ 2469.583552] sgpool-8 63KB 63KB [ 2469.584715] io_kiocb 26KB 41KB [ 2469.585863] mqueue_inode_cache 62KB 62KB [ 2469.587027] nfs_commit_data 15KB 15KB [ 2469.588183] nfs_write_data 47KB 47KB [ 2469.589349] jbd2_inode 11KB 11KB [ 2469.590497] ext4_system_zone 7KB 7KB [ 2469.591648] ext4_io_end_vec 7KB 7KB [ 2469.592820] ext4_bio_post_read_ctx 15KB 15KB [ 2469.594053] kioctx 31KB 31KB [ 2469.595201] aio_kiocb 7KB 7KB [ 2469.596376] dio 277KB 277KB [ 2469.597524] bio-2 4KB 4KB [ 2469.598667] fasync_cache 7KB 7KB [ 2469.599812] pid_namespace 7KB 7KB [ 2469.600982] posix_timers_cache 15KB 15KB [ 2469.602168] rpc_buffers 31KB 31KB [ 2469.603332] rpc_tasks 3KB 3KB [ 2469.604509] UNIX 416KB 416KB [ 2469.605656] UDP-Lite 63KB 63KB [ 2469.606815] tcp_bind_bucket 8KB 8KB [ 2469.607971] inet_peer_cache 4KB 4KB [ 2469.609137] xfrm_state 32KB 32KB [ 2469.610291] ip_fib_trie 8KB 8KB [ 2469.611443] ip_fib_alias 15KB 15KB [ 2469.612612] ip_dst_cache 48KB 48KB [ 2469.613767] PING 62KB 62KB [ 2469.614919] RAW 125KB 125KB [ 2469.616009] UDP 231KB 346KB [ 2469.617106] tw_sock_TCP 15KB 15KB [ 2469.618187] request_sock_TCP 15KB 15KB [ 2469.619264] TCP 60KB 60KB [ 2469.620351] hugetlbfs_inode_cache 30KB 30KB [ 2469.621492] bio-1 11KB 11KB [ 2469.622568] eventpoll_pwq 27KB 27KB [ 2469.623643] eventpoll_epi 55KB 55KB [ 2469.624737] inotify_inode_mark 58KB 58KB [ 2469.625828] request_queue 90KB 90KB [ 2469.626901] blkdev_ioc 45KB 45KB [ 2469.627976] bio-0 472KB 472KB [ 2469.629061] biovec-max 1079KB 1160KB [ 2469.630141] biovec-64 267KB 267KB [ 2469.631235] biovec-16 93KB 93KB [ 2469.632315] user_namespace 31KB 31KB [ 2469.633364] uid_cache 8KB 8KB [ 2469.634345] dmaengine-unmap-2 4KB 4KB [ 2469.635457] audit_buffer 7KB 7KB [ 2469.636568] skbuff_fclone_cache 38KB 60KB [ 2469.637698] skbuff_head_cache 123KB 123KB [ 2469.638796] file_lock_cache 70KB 70KB [ 2469.639890] file_lock_ctx 7KB 7KB [ 2469.640993] fsnotify_mark_connector 32KB 32KB [ 2469.642204] net_namespace 143KB 143KB [ 2469.643291] task_delay_info 79KB 135KB [ 2469.644406] taskstats 46KB 46KB [ 2469.645490] proc_dir_entry 434KB 461KB [ 2469.646582] pde_opener 43KB 43KB [ 2469.647658] seq_file 75KB 75KB [ 2469.648766] sigqueue 122KB 122KB [ 2469.649859] shmem_inode_cache 1309KB 1383KB [ 2469.650944] kernfs_iattrs_cache 266KB 266KB [ 2469.652056] kernfs_node_cache 5879KB 5923KB [ 2469.653165] mnt_cache 220KB 220KB [ 2469.654245] filp 2489KB 2535KB [ 2469.655336] names_cache 21271KB 21607KB [ 2469.656438] hashtab_node 278KB 278KB [ 2469.657520] ebitmap_node 1149KB 1149KB [ 2469.658613] avtab_node 4976KB 4976KB [ 2469.659696] avc_node 39KB 39KB [ 2469.660803] lsm_inode_cache 2658KB 3067KB [ 2469.661883] lsm_file_cache 173KB 192KB [ 2469.662963] key_jar 39KB 39KB [ 2469.664053] uts_namespace 15KB 15KB [ 2469.665162] nsproxy 7KB 7KB [ 2469.666265] vm_area_struct 1412KB 1556KB [ 2469.667347] mm_struct 288KB 535KB [ 2469.668456] fs_cache 40KB 68KB [ 2469.669533] files_cache 173KB 302KB [ 2469.670619] signal_cache 393KB 524KB [ 2469.671697] sighand_cache 351KB 420KB [ 2469.672800] task_struct 1581KB 1890KB [ 2469.673877] cred_jar 170KB 188KB [ 2469.674964] anon_vma_chain 368KB 417KB [ 2469.676040] anon_vma 374KB 374KB [ 2469.677141] pid 59KB 67KB [ 2469.678237] Acpi-Operand 76KB 110KB [ 2469.679328] Acpi-ParseExt 27KB 27KB [ 2469.680424] Acpi-Parse 47KB 63KB [ 2469.681516] Acpi-State 192KB 208KB [ 2469.682594] Acpi-Namespace 24KB 24KB [ 2469.683679] shared_policy_node 8KB 8KB [ 2469.684785] numa_policy 7KB 7KB [ 2469.685871] trace_event_file 163KB 163KB [ 2469.686961] ftrace_event_field 280KB 280KB [ 2469.688062] pool_workqueue 40KB 40KB [ 2469.689169] task_group 16KB 16KB [ 2469.690261] vmap_area 211KB 263KB [ 2469.691341] page->ptl 307KB 334KB [ 2469.692435] kmemleak_scan_area 107KB 175KB [ 2469.693711] kmemleak_object 139628KB 154821KB [ 2469.694815] kmalloc-8k 4944KB 5056KB [ 2469.695895] kmalloc-4k 8400KB 8800KB [ 2469.697012] kmalloc-2k 5144KB 5376KB [ 2469.698098] kmalloc-1k 2668KB 3456KB [ 2469.699238] kmalloc-512 2117KB 4432KB [ 2469.700333] kmalloc-256 1368KB 1488KB [ 2469.701450] kmalloc-192 581KB 888KB [ 2469.702539] kmalloc-128 520KB 676KB [ 2469.703654] kmalloc-96 340KB 624KB [ 2469.704747] kmalloc-64 942KB 1412KB [ 2469.705837] kmalloc-32 857KB 888KB [ 2469.706916] kmalloc-16 372KB 372KB [ 2469.708010] kmalloc-8 334KB 334KB [ 2469.709098] kmem_cache_node 47KB 47KB [ 2469.710191] kmem_cache 75KB 75KB [ 2469.711269] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=14492,uid=0 [ 2469.714787] Out of memory (oom_kill_allocating_task): Killed process 14492 (systemd-journal) total-vm:31724kB, anon-rss:740kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:76kB oom_score_adj:-250 [ 2469.719242] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2469.720681] CPU: 0 PID: 288 Comm: syz-executor.2 Not tainted 5.10.183 #1 [ 2469.721741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2469.723034] Call Trace: [ 2469.723450] dump_stack+0x107/0x167 [ 2469.724034] dump_header+0x106/0x65e [ 2469.724634] oom_kill_process.cold+0x10/0x15 [ 2469.725332] out_of_memory+0x1149/0x1440 [ 2469.725980] ? oom_killer_disable+0x280/0x280 [ 2469.726689] ? mutex_trylock+0x237/0x2b0 [ 2469.727325] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2469.728280] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2469.729211] ? lock_acquire+0xd7/0x470 [ 2469.729843] ? warn_alloc+0x190/0x190 [ 2469.730477] __alloc_pages_nodemask+0x51d/0x600 [ 2469.731216] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2469.732158] ? find_get_entry+0x2c8/0x740 [ 2469.732791] alloc_pages_current+0x187/0x280 [ 2469.733312] __page_cache_alloc+0x2d2/0x360 [ 2469.733827] pagecache_get_page+0x2c7/0xc80 [ 2469.734344] filemap_fault+0x177d/0x2210 [ 2469.734836] ? read_cache_page_gfp+0x30/0x30 [ 2469.735368] ? replace_page_cache_page+0x1200/0x1200 [ 2469.735940] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2469.736584] ext4_filemap_fault+0x87/0xc0 [ 2469.737067] __do_fault+0x113/0x410 [ 2469.737500] handle_mm_fault+0x1e72/0x3520 [ 2469.738017] ? __pmd_alloc+0x5e0/0x5e0 [ 2469.738480] ? vmacache_find+0x55/0x2a0 [ 2469.738960] ? vmacache_update+0xce/0x140 [ 2469.739452] do_user_addr_fault+0x56e/0xc60 [ 2469.739975] exc_page_fault+0xa2/0x1a0 [ 2469.740435] ? asm_exc_page_fault+0x8/0x30 [ 2469.740939] asm_exc_page_fault+0x1e/0x30 [ 2469.741416] RIP: 0033:0x7fd9ea56c688 [ 2469.741853] Code: db 34 b6 d7 82 de 1b 43 48 f7 a4 24 c8 00 00 00 48 8b 05 3b fd 09 01 48 69 8c 24 c0 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca <8b> 08 48 89 d0 41 39 ce 4c 0f 45 ea 48 2b 44 24 10 48 3b 05 e0 fc [ 2469.744003] RSP: 002b:00007ffe495ce370 EFLAGS: 00010206 [ 2469.744656] RAX: 0000001b2d420000 RBX: 00000000000004b4 RCX: 000000000025ac88 [ 2469.745481] RDX: 000000000025adaa RSI: 00007ffe495ce430 RDI: 0000000000000001 [ 2469.746330] RBP: 00007ffe495ce3cc R08: 00000000000009a5 R09: 00007ffe495e9080 [ 2469.747155] R10: 00007ffe495e9090 R11: 0000000000473ed0 R12: 0000000000000032 [ 2469.747995] R13: 000000000025a495 R14: 0000000000000011 R15: 00007ffe495ce430 [ 2469.748873] Mem-Info: [ 2469.749201] active_anon:6698 inactive_anon:59665 isolated_anon:0 [ 2469.749201] active_file:61 inactive_file:32 isolated_file:0 [ 2469.749201] unevictable:0 dirty:0 writeback:0 [ 2469.749201] slab_reclaimable:7653 slab_unreclaimable:67256 [ 2469.749201] mapped:69699 shmem:117 pagetables:2176 bounce:0 [ 2469.749201] free:2363 free_pcp:358 free_cma:0 [ 2469.752868] Node 0 active_anon:26792kB inactive_anon:238660kB active_file:244kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278796kB dirty:0kB writeback:0kB shmem:468kB writeback_tmp:0kB kernel_stack:4896kB all_unreclaimable? yes [ 2469.755658] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2469.758755] lowmem_reserve[]: 0 1616 1616 1616 [ 2469.759340] Node 0 DMA32 free:2968kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:26792kB inactive_anon:238660kB active_file:272kB inactive_file:200kB unevictable:0kB writepending:0kB present:2080640kB managed:1660504kB mlocked:0kB pagetables:8704kB bounce:0kB free_pcp:1432kB local_pcp:1428kB free_cma:0kB [ 2469.762752] lowmem_reserve[]: 0 0 0 0 [ 2469.763237] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 2469.764869] Node 0 DMA32: 516*4kB (UME) 73*8kB (UME) 14*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2872kB [ 2469.766436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2469.767435] 237 total pagecache pages [ 2469.767885] 0 pages in swap cache [ 2469.768314] Swap cache stats: add 0, delete 0, find 0/0 [ 2469.768942] Free swap = 0kB [ 2469.769315] Total swap = 0kB [ 2469.769672] 524158 pages RAM [ 2469.770020] 0 pages HighMem/MovableOnly [ 2469.770492] 105055 pages reserved [ 2469.770894] Unreclaimable slab info: [ 2469.771347] Name Used Total [ 2469.771996] pid_3 7KB 7KB [ 2469.772643] pid_2 82KB 82KB [ 2469.773286] IEEE-802.15.4-MAC 63KB 63KB [ 2469.773912] IEEE-802.15.4-RAW 31KB 31KB [ 2469.774549] p9_req_t 8KB 8KB [ 2469.775182] ip6-frags 7KB 7KB [ 2469.775799] fib6_nodes 32KB 32KB [ 2469.776437] ip6_dst_cache 48KB 48KB [ 2469.777074] PINGv6 63KB 63KB [ 2469.777708] RAWv6 283KB 283KB [ 2469.778350] UDPLITEv6 62KB 62KB [ 2469.778960] UDPv6 62KB 62KB [ 2469.779612] tw_sock_TCPv6 15KB 15KB [ 2469.780263] request_sock_TCPv6 7KB 7KB [ 2469.780909] TCPv6 62KB 62KB [ 2469.781563] scsi_sense_cache 4KB 4KB [ 2469.782213] sd_ext_cdb 3KB 3KB [ 2469.782839] virtio_scsi_cmd 16KB 16KB [ 2469.783473] sgpool-128 59KB 59KB [ 2469.784048] sgpool-64 63KB 63KB [ 2469.784703] sgpool-32 220KB 220KB [ 2469.785292] sgpool-16 90KB 90KB [ 2469.785907] sgpool-8 63KB 63KB [ 2469.786495] io_kiocb 26KB 41KB [ 2469.787119] mqueue_inode_cache 62KB 62KB [ 2469.787723] nfs_commit_data 15KB 15KB [ 2469.788373] nfs_write_data 47KB 47KB [ 2469.788941] jbd2_inode 11KB 11KB [ 2469.789572] ext4_system_zone 7KB 7KB [ 2469.790138] ext4_io_end_vec 7KB 7KB [ 2469.790770] ext4_bio_post_read_ctx 15KB 15KB [ 2469.791395] kioctx 31KB 31KB [ 2469.792006] aio_kiocb 7KB 7KB [ 2469.792608] dio 277KB 277KB [ 2469.793242] bio-2 4KB 4KB [ 2469.793815] fasync_cache 7KB 7KB [ 2469.794455] pid_namespace 7KB 7KB [ 2469.795017] posix_timers_cache 15KB 15KB [ 2469.795662] rpc_buffers 31KB 31KB [ 2469.796256] rpc_tasks 3KB 3KB [ 2469.796876] UNIX 416KB 416KB [ 2469.797467] UDP-Lite 63KB 63KB [ 2469.798084] tcp_bind_bucket 8KB 8KB [ 2469.798669] inet_peer_cache 4KB 4KB [ 2469.799291] xfrm_state 32KB 32KB [ 2469.799855] ip_fib_trie 8KB 8KB [ 2469.800497] ip_fib_alias 15KB 15KB [ 2469.801101] ip_dst_cache 48KB 48KB [ 2469.801684] PING 62KB 62KB [ 2469.802501] RAW 125KB 125KB [ 2469.803068] UDP 231KB 346KB [ 2469.803699] tw_sock_TCP 15KB 15KB [ 2469.804289] request_sock_TCP 15KB 15KB [ 2469.804898] TCP 60KB 60KB [ 2469.805475] hugetlbfs_inode_cache 30KB 30KB [ 2469.806127] bio-1 11KB 11KB [ 2469.806701] eventpoll_pwq 27KB 27KB [ 2469.807330] eventpoll_epi 55KB 55KB [ 2469.807891] inotify_inode_mark 58KB 58KB [ 2469.808542] request_queue 90KB 90KB [ 2469.809105] blkdev_ioc 45KB 45KB [ 2469.809735] bio-0 472KB 472KB [ 2469.810326] biovec-max 1079KB 1160KB [ 2469.810948] biovec-64 267KB 267KB [ 2469.811527] biovec-16 93KB 93KB [ 2469.812166] user_namespace 31KB 31KB [ 2469.812747] uid_cache 8KB 8KB [ 2469.813372] dmaengine-unmap-2 4KB 4KB [ 2469.813933] audit_buffer 7KB 7KB [ 2469.814573] skbuff_fclone_cache 38KB 60KB [ 2469.815174] skbuff_head_cache 123KB 123KB [ 2469.815789] file_lock_cache 70KB 70KB [ 2469.816395] file_lock_ctx 7KB 7KB [ 2469.816994] fsnotify_mark_connector 32KB 32KB [ 2469.817627] net_namespace 143KB 143KB [ 2469.818246] task_delay_info 79KB 135KB [ 2469.818804] taskstats 46KB 46KB [ 2469.819440] proc_dir_entry 434KB 461KB [ 2469.820003] pde_opener 43KB 43KB [ 2469.820639] seq_file 75KB 75KB [ 2469.821221] sigqueue 122KB 122KB [ 2469.821837] shmem_inode_cache 1309KB 1383KB [ 2469.822418] kernfs_iattrs_cache 266KB 266KB [ 2469.823056] kernfs_node_cache 5879KB 5923KB [ 2469.823637] mnt_cache 220KB 220KB [ 2469.824279] filp 2489KB 2535KB [ 2469.824841] names_cache 21271KB 21607KB [ 2469.825472] hashtab_node 278KB 278KB [ 2469.826033] ebitmap_node 1149KB 1149KB [ 2469.826653] avtab_node 4976KB 4976KB [ 2469.827240] avc_node 39KB 39KB [ 2469.827881] lsm_inode_cache 2658KB 3067KB [ 2469.828467] lsm_file_cache 173KB 192KB [ 2469.829078] key_jar 39KB 39KB [ 2469.829669] uts_namespace 15KB 15KB [ 2469.830287] nsproxy 7KB 7KB [ 2469.830878] vm_area_struct 1412KB 1556KB [ 2469.831505] mm_struct 288KB 535KB [ 2469.832069] fs_cache 40KB 68KB [ 2469.832708] files_cache 173KB 302KB [ 2469.833296] signal_cache 393KB 524KB [ 2469.833895] sighand_cache 351KB 420KB [ 2469.834522] task_struct 1581KB 1890KB [ 2469.835085] cred_jar 170KB 188KB [ 2469.835706] anon_vma_chain 368KB 417KB [ 2469.836295] anon_vma 374KB 374KB [ 2469.836893] pid 59KB 67KB [ 2469.837470] Acpi-Operand 76KB 110KB [ 2469.838069] Acpi-ParseExt 27KB 27KB [ 2469.838687] Acpi-Parse 47KB 63KB [ 2469.839304] Acpi-State 192KB 208KB [ 2469.839907] Acpi-Namespace 24KB 24KB [ 2469.840537] shared_policy_node 8KB 8KB [ 2469.841160] numa_policy 7KB 7KB [ 2469.841730] trace_event_file 163KB 163KB [ 2469.842349] ftrace_event_field 280KB 280KB [ 2469.842958] pool_workqueue 40KB 40KB [ 2469.843575] task_group 16KB 16KB [ 2469.844194] vmap_area 211KB 263KB [ 2469.844781] page->ptl 307KB 334KB [ 2469.845394] kmemleak_scan_area 107KB 175KB [ 2469.846958] kmemleak_object 139628KB 154821KB [ 2469.847583] kmalloc-8k 4944KB 5056KB [ 2469.848166] kmalloc-4k 8400KB 8800KB [ 2469.848783] kmalloc-2k 5144KB 5376KB [ 2469.849407] kmalloc-1k 2668KB 3456KB [ 2469.850014] kmalloc-512 2117KB 4432KB [ 2469.850642] kmalloc-256 1368KB 1488KB [ 2469.851302] kmalloc-192 581KB 888KB [ 2469.851886] kmalloc-128 520KB 676KB [ 2469.852536] kmalloc-96 340KB 624KB [ 2469.853195] kmalloc-64 942KB 1412KB [ 2469.853759] kmalloc-32 857KB 888KB [ 2469.854371] kmalloc-16 372KB 372KB [ 2469.854967] kmalloc-8 334KB 334KB [ 2469.855563] kmem_cache_node 47KB 47KB [ 2469.856178] kmem_cache 75KB 75KB [ 2469.856762] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=288,uid=0 [ 2469.858371] Out of memory (oom_kill_allocating_task): Killed process 288 (syz-executor.2) total-vm:93280kB, anon-rss:384kB, file-rss:34884kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 2469.976339] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2469.977909] CPU: 0 PID: 14495 Comm: in:imklog Not tainted 5.10.183 #1 [ 2469.978922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2469.980227] Call Trace: [ 2469.980643] dump_stack+0x107/0x167 [ 2469.981224] dump_header+0x106/0x65e [ 2469.981797] oom_kill_process.cold+0x10/0x15 [ 2469.982500] out_of_memory+0x1149/0x1440 [ 2469.983124] ? oom_killer_disable+0x280/0x280 [ 2469.983832] ? mutex_trylock+0x237/0x2b0 [ 2469.984465] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2469.985409] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2469.986299] ? lock_acquire+0xd7/0x470 [ 2469.986917] ? warn_alloc+0x190/0x190 [ 2469.987523] __alloc_pages_nodemask+0x51d/0x600 [ 2469.988275] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2469.989181] ? find_get_entry+0x2c8/0x740 [ 2469.989841] alloc_pages_current+0x187/0x280 [ 2469.990509] __page_cache_alloc+0x2d2/0x360 [ 2469.991200] pagecache_get_page+0x2c7/0xc80 [ 2469.991853] filemap_fault+0x177d/0x2210 [ 2469.992516] ? read_cache_page_gfp+0x30/0x30 [ 2469.993181] ? replace_page_cache_page+0x1200/0x1200 [ 2469.993978] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2469.994773] ext4_filemap_fault+0x87/0xc0 [ 2469.995423] __do_fault+0x113/0x410 [ 2469.995978] handle_mm_fault+0x1e72/0x3520 [ 2469.996668] ? find_held_lock+0x2c/0x110 [ 2469.997264] ? __pmd_alloc+0x5e0/0x5e0 [ 2469.997708] ? vmacache_find+0x55/0x2a0 [ 2469.998142] do_user_addr_fault+0x56e/0xc60 [ 2469.998637] exc_page_fault+0xa2/0x1a0 [ 2469.999049] ? asm_exc_page_fault+0x8/0x30 [ 2469.999526] asm_exc_page_fault+0x1e/0x30 [ 2469.999962] RIP: 0033:0x5566ae9151b0 [ 2470.000398] Code: Unable to access opcode bytes at RIP 0x5566ae915186. [ 2470.001095] RSP: 002b:00007f44c2c5f3d8 EFLAGS: 00010202 [ 2470.001702] RAX: 0000000000000000 RBX: 00007f44c2c5f418 RCX: 0000000000000000 [ 2470.002465] RDX: 0000000000000000 RSI: 00007f44b4002068 RDI: 00007f44b4002070 [ 2470.003267] RBP: 0000000000000000 R08: 00007f44b4001f60 R09: 00005566aff91e88 [ 2470.004016] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2470.004824] R13: 00007f44c2c5fd03 R14: 0000000000000004 R15: 00007f44c2c5fd7a [ 2470.005687] Mem-Info: [ 2470.005976] active_anon:6697 inactive_anon:59471 isolated_anon:0 [ 2470.005976] active_file:72 inactive_file:13 isolated_file:0 [ 2470.005976] unevictable:0 dirty:0 writeback:0 [ 2470.005976] slab_reclaimable:7653 slab_unreclaimable:67262 [ 2470.005976] mapped:69689 shmem:117 pagetables:2132 bounce:0 [ 2470.005976] free:2661 free_pcp:3 free_cma:0 [ 2470.009426] Node 0 active_anon:26788kB inactive_anon:237884kB active_file:288kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278756kB dirty:0kB writeback:0kB shmem:468kB writeback_tmp:0kB kernel_stack:4864kB all_unreclaimable? no [ 2470.012043] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2470.014775] lowmem_reserve[]: 0 1616 1616 1616 [ 2470.015326] Node 0 DMA32 free:4160kB min:15356kB low:17008kB high:18660kB reserved_highatomic:0KB active_anon:26788kB inactive_anon:237884kB active_file:456kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660504kB mlocked:0kB pagetables:8528kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2470.018326] lowmem_reserve[]: 0 0 0 0 [ 2470.018771] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 2470.020310] Node 0 DMA32: 765*4kB (UME) 95*8kB (UME) 15*16kB (UM) 8*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4316kB [ 2470.021767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2470.022731] 168 total pagecache pages [ 2470.023148] 0 pages in swap cache [ 2470.023537] Swap cache stats: add 0, delete 0, find 0/0 [ 2470.024104] Free swap = 0kB [ 2470.024471] Total swap = 0kB [ 2470.024794] 524158 pages RAM [ 2470.025131] 0 pages HighMem/MovableOnly [ 2470.025565] 105055 pages reserved [ 2470.025955] Unreclaimable slab info: [ 2470.026360] Name Used Total [ 2470.026975] pid_3 7KB 7KB [ 2470.027550] pid_2 82KB 82KB [ 2470.028162] IEEE-802.15.4-MAC 63KB 63KB [ 2470.028728] IEEE-802.15.4-RAW 31KB 31KB [ 2470.029339] p9_req_t 8KB 8KB [ 2470.029896] ip6-frags 7KB 7KB [ 2470.030500] fib6_nodes 32KB 32KB [ 2470.031060] ip6_dst_cache 48KB 48KB [ 2470.031668] PINGv6 63KB 63KB [ 2470.032254] RAWv6 283KB 283KB [ 2470.032857] UDPLITEv6 62KB 62KB [ 2470.033427] UDPv6 62KB 62KB [ 2470.034032] tw_sock_TCPv6 15KB 15KB [ 2470.034601] request_sock_TCPv6 7KB 7KB [ 2470.035223] TCPv6 62KB 62KB [ 2470.035787] scsi_sense_cache 4KB 4KB [ 2470.036416] sd_ext_cdb 3KB 3KB [ 2470.036976] virtio_scsi_cmd 16KB 16KB [ 2470.037601] sgpool-128 59KB 59KB [ 2470.038177] sgpool-64 63KB 63KB [ 2470.038776] sgpool-32 220KB 220KB [ 2470.039350] sgpool-16 90KB 90KB [ 2470.039953] sgpool-8 63KB 63KB [ 2470.040575] io_kiocb 26KB 41KB [ 2470.041185] mqueue_inode_cache 62KB 62KB [ 2470.041803] nfs_commit_data 15KB 15KB [ 2470.042423] nfs_write_data 47KB 47KB [ 2470.043015] jbd2_inode 11KB 11KB [ 2470.043628] ext4_system_zone 7KB 7KB [ 2470.044247] ext4_io_end_vec 7KB 7KB [ 2470.044850] ext4_bio_post_read_ctx 15KB 15KB [ 2470.045514] kioctx 31KB 31KB [ 2470.046112] aio_kiocb 7KB 7KB [ 2470.046730] dio 277KB 277KB [ 2470.047349] bio-2 4KB 4KB [ 2470.047953] fasync_cache 7KB 7KB [ 2470.048578] pid_namespace 7KB 7KB [ 2470.049192] posix_timers_cache 15KB 15KB [ 2470.049806] rpc_buffers 31KB 31KB [ 2470.050416] rpc_tasks 3KB 3KB [ 2470.051025] UNIX 416KB 416KB [ 2470.051635] UDP-Lite 63KB 63KB [ 2470.052252] tcp_bind_bucket 8KB 8KB [ 2470.052866] inet_peer_cache 4KB 4KB [ 2470.053482] xfrm_state 32KB 32KB [ 2470.054078] ip_fib_trie 8KB 8KB [ 2470.054699] ip_fib_alias 15KB 15KB [ 2470.055310] ip_dst_cache 48KB 48KB [ 2470.055918] PING 62KB 62KB [ 2470.056543] RAW 125KB 125KB [ 2470.057164] UDP 231KB 346KB [ 2470.057772] tw_sock_TCP 15KB 15KB [ 2470.058387] request_sock_TCP 15KB 15KB [ 2470.059001] TCP 60KB 60KB [ 2470.059619] hugetlbfs_inode_cache 30KB 30KB [ 2470.060297] bio-1 11KB 11KB [ 2470.060908] eventpoll_pwq 27KB 27KB [ 2470.061525] eventpoll_epi 55KB 55KB [ 2470.062119] inotify_inode_mark 58KB 58KB [ 2470.062757] request_queue 90KB 90KB [ 2470.063369] blkdev_ioc 45KB 45KB [ 2470.063971] bio-0 472KB 472KB [ 2470.064600] biovec-max 1079KB 1160KB [ 2470.065207] biovec-64 267KB 267KB [ 2470.065806] biovec-16 93KB 93KB [ 2470.066432] user_namespace 31KB 31KB [ 2470.067045] uid_cache 8KB 8KB [ 2470.067667] dmaengine-unmap-2 4KB 4KB [ 2470.068286] audit_buffer 7KB 7KB [ 2470.068885] skbuff_fclone_cache 38KB 60KB [ 2470.069535] skbuff_head_cache 123KB 123KB [ 2470.070125] file_lock_cache 70KB 70KB [ 2470.070742] file_lock_ctx 7KB 7KB [ 2470.071358] fsnotify_mark_connector 32KB 32KB [ 2470.072008] net_namespace 143KB 143KB [ 2470.072637] task_delay_info 79KB 135KB [ 2470.073260] taskstats 46KB 46KB [ 2470.073860] proc_dir_entry 434KB 461KB [ 2470.074479] pde_opener 43KB 43KB [ 2470.075080] seq_file 75KB 75KB [ 2470.075697] sigqueue 122KB 122KB [ 2470.076326] shmem_inode_cache 1309KB 1383KB [ 2470.076927] kernfs_iattrs_cache 266KB 266KB [ 2470.077557] kernfs_node_cache 5879KB 5923KB [ 2470.078176] mnt_cache 220KB 220KB [ 2470.078780] filp 2489KB 2535KB [ 2470.079399] names_cache 21271KB 21607KB [ 2470.079999] hashtab_node 278KB 278KB [ 2470.080619] ebitmap_node 1149KB 1149KB [ 2470.081235] avtab_node 4976KB 4976KB [ 2470.081842] avc_node 39KB 39KB [ 2470.082455] lsm_inode_cache 2658KB 3067KB [ 2470.083052] lsm_file_cache 173KB 192KB [ 2470.083661] key_jar 39KB 39KB [ 2470.084280] uts_namespace 15KB 15KB [ 2470.084872] nsproxy 7KB 7KB [ 2470.085493] vm_area_struct 1412KB 1556KB [ 2470.086098] mm_struct 288KB 535KB [ 2470.086709] fs_cache 40KB 68KB [ 2470.087315] files_cache 173KB 302KB [ 2470.087924] signal_cache 393KB 524KB [ 2470.088562] sighand_cache 351KB 420KB [ 2470.089174] task_struct 1581KB 1890KB [ 2470.089787] cred_jar 170KB 188KB [ 2470.090399] anon_vma_chain 368KB 417KB [ 2470.091001] anon_vma 374KB 374KB [ 2470.091615] pid 59KB 67KB [ 2470.092228] Acpi-Operand 76KB 110KB [ 2470.092838] Acpi-ParseExt 27KB 27KB [ 2470.093452] Acpi-Parse 47KB 63KB [ 2470.094055] Acpi-State 192KB 208KB [ 2470.094666] Acpi-Namespace 24KB 24KB [ 2470.095285] shared_policy_node 8KB 8KB [ 2470.095899] numa_policy 7KB 7KB [ 2470.096531] trace_event_file 163KB 163KB [ 2470.097136] ftrace_event_field 280KB 280KB [ 2470.097756] pool_workqueue 40KB 40KB [ 2470.098370] task_group 16KB 16KB [ 2470.098986] vmap_area 211KB 263KB [ 2470.099595] page->ptl 307KB 334KB [ 2470.100217] kmemleak_scan_area 107KB 175KB [ 2470.100998] kmemleak_object 139641KB 154821KB [ 2470.101630] kmalloc-8k 4944KB 5056KB [ 2470.102249] kmalloc-4k 8400KB 8800KB [ 2470.102842] kmalloc-2k 5144KB 5376KB [ 2470.103468] kmalloc-1k 2668KB 3456KB [ 2470.104072] kmalloc-512 2117KB 4432KB [ 2470.104711] kmalloc-256 1368KB 1488KB [ 2470.105321] kmalloc-192 581KB 888KB [ 2470.105925] kmalloc-128 520KB 676KB [ 2470.106541] kmalloc-96 340KB 624KB [ 2470.107169] kmalloc-64 942KB 1412KB [ 2470.107772] kmalloc-32 857KB 888KB [ 2470.108393] kmalloc-16 372KB 372KB [ 2470.108996] kmalloc-8 334KB 334KB [ 2470.109599] kmem_cache_node 47KB 47KB [ 2470.110207] kmem_cache 75KB 75KB [ 2470.110813] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=14495,uid=0 [ 2470.112648] Out of memory (oom_kill_allocating_task): Killed process 14493 (rsyslogd) total-vm:220876kB, anon-rss:472kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 2470.317370] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2470.318451] CPU: 0 PID: 254 Comm: syz-fuzzer Not tainted 5.10.183 #1 [ 2470.319128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.320036] Call Trace: [ 2470.320327] dump_stack+0x107/0x167 [ 2470.320716] dump_header+0x106/0x65e [ 2470.321128] oom_kill_process.cold+0x10/0x15 [ 2470.321606] out_of_memory+0x1149/0x1440 [ 2470.322058] ? oom_killer_disable+0x280/0x280 [ 2470.322549] ? mutex_trylock+0x237/0x2b0 [ 2470.322984] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2470.323628] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2470.324281] ? lock_acquire+0xd7/0x470 [ 2470.324704] ? warn_alloc+0x190/0x190 [ 2470.325147] __alloc_pages_nodemask+0x51d/0x600 [ 2470.325683] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2470.326357] ? find_get_entry+0x2c8/0x740 [ 2470.326839] alloc_pages_current+0x187/0x280 [ 2470.327339] __page_cache_alloc+0x2d2/0x360 [ 2470.327837] pagecache_get_page+0x2c7/0xc80 [ 2470.328345] filemap_fault+0x177d/0x2210 [ 2470.328814] ? read_cache_page_gfp+0x30/0x30 [ 2470.329312] ? replace_page_cache_page+0x1200/0x1200 [ 2470.329883] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2470.330481] ext4_filemap_fault+0x87/0xc0 [ 2470.330949] __do_fault+0x113/0x410 [ 2470.331364] handle_mm_fault+0x1e72/0x3520 [ 2470.331858] ? hrtimer_nanosleep+0x283/0x5d0 [ 2470.332369] ? __pmd_alloc+0x5e0/0x5e0 [ 2470.332821] ? vmacache_find+0x55/0x2a0 [ 2470.333281] do_user_addr_fault+0x56e/0xc60 [ 2470.333791] exc_page_fault+0xa2/0x1a0 [ 2470.334227] ? asm_exc_page_fault+0x8/0x30 [ 2470.334708] asm_exc_page_fault+0x1e/0x30 [ 2470.335171] RIP: 0033:0x465f2d [ 2470.335543] Code: Unable to access opcode bytes at RIP 0x465f03. [ 2470.336225] RSP: 002b:000000c00003ff18 EFLAGS: 00010212 [ 2470.336844] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000465f2d [ 2470.337658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00003ff18 [ 2470.338459] RBP: 000000c00003ff28 R08: 000000000006866a R09: 00007ffe629c9080 [ 2470.339274] R10: 00007ffe629c9090 R11: 0000000000000212 R12: 0000000000438880 [ 2470.340080] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 2470.341006] Mem-Info: [ 2470.341318] active_anon:6696 inactive_anon:59281 isolated_anon:0 [ 2470.341318] active_file:27 inactive_file:13 isolated_file:0 [ 2470.341318] unevictable:0 dirty:0 writeback:0 [ 2470.341318] slab_reclaimable:7653 slab_unreclaimable:67142 [ 2470.341318] mapped:69633 shmem:117 pagetables:2116 bounce:0 [ 2470.341318] free:2583 free_pcp:62 free_cma:0 [ 2470.344826] Node 0 active_anon:26784kB inactive_anon:237124kB active_file:108kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278532kB dirty:0kB writeback:0kB shmem:468kB writeback_tmp:0kB kernel_stack:4736kB all_unreclaimable? no [ 2470.347437] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2470.350394] lowmem_reserve[]: 0 1616 1616 1616 [ 2470.350905] Node 0 DMA32 free:3848kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:26784kB inactive_anon:237124kB active_file:40kB inactive_file:80kB unevictable:0kB writepending:0kB present:2080640kB managed:1660504kB mlocked:0kB pagetables:8464kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2470.354123] lowmem_reserve[]: 0 0 0 0 [ 2470.354585] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 2470.356110] Node 0 DMA32: 559*4kB (UME) 94*8kB (UME) 14*16kB (M) 21*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3884kB [ 2470.357708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2470.358682] 154 total pagecache pages [ 2470.359111] 0 pages in swap cache [ 2470.359516] Swap cache stats: add 0, delete 0, find 0/0 [ 2470.360109] Free swap = 0kB [ 2470.360463] Total swap = 0kB [ 2470.360802] 524158 pages RAM [ 2470.361163] 0 pages HighMem/MovableOnly [ 2470.361614] 105055 pages reserved [ 2470.361993] Unreclaimable slab info: [ 2470.362406] Name Used Total [ 2470.363027] pid_3 7KB 7KB [ 2470.363650] pid_2 82KB 82KB [ 2470.364266] IEEE-802.15.4-MAC 63KB 63KB [ 2470.364865] IEEE-802.15.4-RAW 31KB 31KB [ 2470.365482] p9_req_t 8KB 8KB [ 2470.366080] ip6-frags 7KB 7KB [ 2470.366695] fib6_nodes 32KB 32KB [ 2470.367301] ip6_dst_cache 48KB 48KB [ 2470.367903] PINGv6 63KB 63KB [ 2470.368492] RAWv6 283KB 283KB [ 2470.369095] UDPLITEv6 62KB 62KB [ 2470.369710] UDPv6 62KB 62KB [ 2470.370314] tw_sock_TCPv6 15KB 15KB [ 2470.370904] request_sock_TCPv6 7KB 7KB [ 2470.371526] TCPv6 62KB 62KB [ 2470.372127] scsi_sense_cache 4KB 4KB [ 2470.372726] sd_ext_cdb 3KB 3KB [ 2470.373342] virtio_scsi_cmd 16KB 16KB [ 2470.373940] sgpool-128 59KB 59KB [ 2470.374523] sgpool-64 63KB 63KB [ 2470.375110] sgpool-32 220KB 220KB [ 2470.375694] sgpool-16 90KB 90KB [ 2470.376313] sgpool-8 63KB 63KB [ 2470.376903] io_kiocb 26KB 41KB [ 2470.377505] mqueue_inode_cache 62KB 62KB [ 2470.378122] nfs_commit_data 15KB 15KB [ 2470.378732] nfs_write_data 47KB 47KB [ 2470.379343] jbd2_inode 11KB 11KB [ 2470.379936] ext4_system_zone 7KB 7KB [ 2470.380558] ext4_io_end_vec 7KB 7KB [ 2470.381166] ext4_bio_post_read_ctx 15KB 15KB [ 2470.381800] kioctx 31KB 31KB [ 2470.382411] aio_kiocb 7KB 7KB [ 2470.383003] dio 277KB 277KB [ 2470.383610] bio-2 4KB 4KB [ 2470.384210] fasync_cache 7KB 7KB [ 2470.384789] pid_namespace 7KB 7KB [ 2470.385412] posix_timers_cache 15KB 15KB [ 2470.386017] rpc_buffers 31KB 31KB [ 2470.386627] rpc_tasks 3KB 3KB [ 2470.387236] UNIX 416KB 416KB [ 2470.387834] UDP-Lite 63KB 63KB [ 2470.388462] tcp_bind_bucket 8KB 8KB [ 2470.389057] inet_peer_cache 4KB 4KB [ 2470.389678] xfrm_state 32KB 32KB [ 2470.390258] ip_fib_trie 8KB 8KB [ 2470.390852] ip_fib_alias 15KB 15KB [ 2470.391459] ip_dst_cache 48KB 48KB [ 2470.392056] PING 62KB 62KB [ 2470.392648] RAW 125KB 125KB [ 2470.393257] UDP 231KB 346KB [ 2470.393857] tw_sock_TCP 15KB 15KB [ 2470.394468] request_sock_TCP 15KB 15KB [ 2470.395067] TCP 60KB 60KB [ 2470.395674] hugetlbfs_inode_cache 30KB 30KB [ 2470.396337] bio-1 11KB 11KB [ 2470.396926] eventpoll_pwq 27KB 27KB [ 2470.397541] eventpoll_epi 55KB 55KB [ 2470.398158] inotify_inode_mark 58KB 58KB [ 2470.398762] request_queue 90KB 90KB [ 2470.399380] blkdev_ioc 45KB 45KB [ 2470.399976] bio-0 472KB 472KB [ 2470.400592] biovec-max 1079KB 1160KB [ 2470.401208] biovec-64 267KB 267KB [ 2470.401766] biovec-16 93KB 93KB [ 2470.402380] user_namespace 31KB 31KB [ 2470.402976] uid_cache 8KB 8KB [ 2470.403581] dmaengine-unmap-2 4KB 4KB [ 2470.404204] audit_buffer 7KB 7KB [ 2470.404783] skbuff_fclone_cache 38KB 60KB [ 2470.405420] skbuff_head_cache 123KB 123KB [ 2470.406012] file_lock_cache 70KB 70KB [ 2470.406622] file_lock_ctx 7KB 7KB [ 2470.407235] fsnotify_mark_connector 32KB 32KB [ 2470.407876] net_namespace 143KB 143KB [ 2470.408507] task_delay_info 79KB 135KB [ 2470.409102] taskstats 46KB 46KB [ 2470.409721] proc_dir_entry 434KB 461KB [ 2470.410338] pde_opener 43KB 43KB [ 2470.410945] seq_file 75KB 75KB [ 2470.411561] sigqueue 122KB 122KB [ 2470.412184] shmem_inode_cache 1308KB 1383KB [ 2470.412753] kernfs_iattrs_cache 266KB 266KB [ 2470.413398] kernfs_node_cache 5879KB 5923KB [ 2470.413998] mnt_cache 220KB 220KB [ 2470.414616] filp 2435KB 2535KB [ 2470.415239] names_cache 20752KB 21101KB [ 2470.415845] hashtab_node 278KB 278KB [ 2470.416476] ebitmap_node 1149KB 1149KB [ 2470.417083] avtab_node 4976KB 4976KB [ 2470.417708] avc_node 39KB 39KB [ 2470.418340] lsm_inode_cache 2658KB 3067KB [ 2470.418942] lsm_file_cache 173KB 192KB [ 2470.419566] key_jar 39KB 39KB [ 2470.420178] uts_namespace 15KB 15KB [ 2470.420778] nsproxy 7KB 7KB [ 2470.421402] vm_area_struct 1412KB 1556KB [ 2470.422003] mm_struct 288KB 535KB [ 2470.422620] fs_cache 40KB 68KB [ 2470.423241] files_cache 173KB 302KB [ 2470.423847] signal_cache 393KB 524KB [ 2470.424471] sighand_cache 351KB 420KB [ 2470.425073] task_struct 1575KB 1890KB [ 2470.425694] cred_jar 170KB 188KB [ 2470.426314] anon_vma_chain 368KB 417KB [ 2470.426918] anon_vma 374KB 374KB [ 2470.427531] pid 59KB 67KB [ 2470.428125] Acpi-Operand 76KB 110KB [ 2470.428766] Acpi-ParseExt 27KB 27KB [ 2470.429383] Acpi-Parse 47KB 63KB [ 2470.429986] Acpi-State 192KB 208KB [ 2470.430576] Acpi-Namespace 24KB 24KB [ 2470.431198] shared_policy_node 8KB 8KB [ 2470.431786] numa_policy 7KB 7KB [ 2470.432422] trace_event_file 163KB 163KB [ 2470.432992] ftrace_event_field 280KB 280KB [ 2470.433615] pool_workqueue 40KB 40KB [ 2470.434217] task_group 16KB 16KB [ 2470.434827] vmap_area 211KB 263KB [ 2470.435416] page->ptl 307KB 334KB [ 2470.436021] kmemleak_scan_area 107KB 175KB [ 2470.436785] kmemleak_object 139377KB 154821KB [ 2470.437405] kmalloc-8k 4944KB 5056KB [ 2470.437976] kmalloc-4k 8368KB 8800KB [ 2470.438600] kmalloc-2k 5144KB 5376KB [ 2470.439176] kmalloc-1k 2668KB 3456KB [ 2470.439793] kmalloc-512 2117KB 4432KB [ 2470.440388] kmalloc-256 1368KB 1488KB [ 2470.441002] kmalloc-192 581KB 888KB [ 2470.441586] kmalloc-128 520KB 676KB [ 2470.442215] kmalloc-96 340KB 624KB [ 2470.442783] kmalloc-64 942KB 1412KB [ 2470.443391] kmalloc-32 857KB 888KB [ 2470.443956] kmalloc-16 372KB 372KB [ 2470.444591] kmalloc-8 334KB 334KB [ 2470.445165] kmem_cache_node 47KB 47KB [ 2470.445766] kmem_cache 75KB 75KB [ 2470.446344] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=254,uid=0 [ 2470.448142] Out of memory (oom_kill_allocating_task): Killed process 253 (syz-fuzzer) total-vm:1240788kB, anon-rss:224964kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:896kB oom_score_adj:0 [ 2470.465073] warn_alloc: 1 callbacks suppressed [ 2470.465084] syz-executor.2: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 2470.467048] CPU: 0 PID: 14712 Comm: syz-executor.2 Not tainted 5.10.183 #1 [ 2470.467795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.468769] Call Trace: [ 2470.469077] dump_stack+0x107/0x167 [ 2470.469500] warn_alloc.cold+0x95/0x18a [ 2470.469958] ? zone_watermark_ok_safe+0x260/0x260 [ 2470.470476] ? queue_oom_reaper+0x86/0x1e0 [ 2470.470973] ? wait_for_completion_io+0x270/0x270 [ 2470.471499] __alloc_pages_slowpath.constprop.0+0x1c80/0x2130 [ 2470.472170] ? lock_acquire+0xd7/0x470 [ 2470.472601] ? warn_alloc+0x190/0x190 [ 2470.473054] __alloc_pages_nodemask+0x51d/0x600 [ 2470.473557] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2470.474178] ? trace_hardirqs_on+0x5b/0x180 [ 2470.474638] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2470.475330] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2470.475923] ? alloc_pages_current+0xf9/0x280 [ 2470.476442] ? alloc_pages_current+0x244/0x280 [ 2470.476935] alloc_pages_current+0x187/0x280 [ 2470.477436] relay_open_buf.part.0+0x2a5/0xc00 [ 2470.477934] relay_open+0x531/0xa10 [ 2470.478350] do_blk_trace_setup+0x4cf/0xc10 [ 2470.478813] ? _copy_from_user+0xfb/0x1b0 [ 2470.479288] __blk_trace_setup+0xca/0x180 [ 2470.479736] ? do_blk_trace_setup+0xc10/0xc10 [ 2470.480259] ? perf_trace_lock+0xac/0x490 [ 2470.480713] ? SOFTIRQ_verbose+0x10/0x10 [ 2470.481184] blk_trace_setup+0x43/0x60 [ 2470.481604] sg_ioctl_common+0x634/0x2570 [ 2470.482078] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2470.482639] ? do_vfs_ioctl+0x283/0x10d0 [ 2470.483110] ? sg_write+0x120/0x120 [ 2470.483502] ? generic_block_fiemap+0x60/0x60 [ 2470.484024] ? _down_write_nest_lock+0x160/0x160 [ 2470.484548] ? selinux_file_ioctl+0xb6/0x270 [ 2470.485056] ? sg_compat_ioctl+0x120/0x120 [ 2470.485510] sg_ioctl+0x8f/0x120 [ 2470.485906] __x64_sys_ioctl+0x19a/0x210 [ 2470.486349] do_syscall_64+0x33/0x40 [ 2470.486775] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2470.487322] RIP: 0033:0x7fd9ea5bfb19 [ 2470.487741] Code: Unable to access opcode bytes at RIP 0x7fd9ea5bfaef. [ 2470.488453] RSP: 002b:00007fd9e7b14188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.489348] RAX: ffffffffffffffda RBX: 00007fd9ea6d3020 RCX: 00007fd9ea5bfb19 [ 2470.490103] RDX: 0000000020000080 RSI: 00000000c0481273 RDI: 0000000000000004 [ 2470.490918] RBP: 00007fd9ea619f6d R08: 0000000000000000 R09: 0000000000000000 [ 2470.491671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2470.492489] R13: 00007ffe495ce11f R14: 00007fd9e7b14300 R15: 0000000000022000 [ 2470.493378] Mem-Info: [ 2470.493673] active_anon:6696 inactive_anon:59281 isolated_anon:0 [ 2470.493673] active_file:27 inactive_file:0 isolated_file:0 [ 2470.493673] unevictable:0 dirty:0 writeback:0 [ 2470.493673] slab_reclaimable:7653 slab_unreclaimable:67142 [ 2470.493673] mapped:69633 shmem:117 pagetables:2116 bounce:0 [ 2470.493673] free:2459 free_pcp:126 free_cma:0 [ 2470.497180] Node 0 active_anon:26784kB inactive_anon:237124kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278532kB dirty:0kB writeback:0kB shmem:468kB writeback_tmp:0kB kernel_stack:4608kB all_unreclaimable? yes [ 2470.499867] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2470.502860] lowmem_reserve[]: 0 1616 1616 1616 [ 2470.503420] Node 0 DMA32 free:3352kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:26784kB inactive_anon:237124kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660504kB mlocked:0kB pagetables:8464kB bounce:0kB free_pcp:504kB local_pcp:496kB free_cma:0kB [ 2470.506704] lowmem_reserve[]: 0 0 0 0 [ 2470.507189] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 2470.508765] Node 0 DMA32: 461*4kB (UME) 89*8kB (UME) 14*16kB (UM) 11*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3132kB [ 2470.510355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2470.511342] 154 total pagecache pages [ 2470.511764] 0 pages in swap cache [ 2470.512179] Swap cache stats: add 0, delete 0, find 0/0 [ 2470.512799] Free swap = 0kB [ 2470.513164] Total swap = 0kB [ 2470.513500] 524158 pages RAM [ 2470.513844] 0 pages HighMem/MovableOnly [ 2470.514306] 105055 pages reserved [ 2470.663223] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2470.668341] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2470.699415] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 2. [ 2470.749957] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2470.897069] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2470.901360] systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 2. [ 2470.903015] systemd[1]: Stopped System Logging Service. [ 2471.040474] systemd[1]: Starting System Logging Service... [ 2471.149725] systemd[1]: ssh.service: Failed with result 'oom-kill'. [ 2471.153407] systemd[1]: ssh.service: Unit process 247 (sshd) remains running after unit stopped. [ 2471.166228] systemd[1]: ssh.service: Consumed 31min 35.423s CPU time. [ 2471.269377] systemd[1]: ssh.service: Scheduled restart job, restart counter is at 1. [ 2471.272210] systemd[1]: Stopped OpenBSD Secure Shell server. [ 2471.273410] systemd[1]: ssh.service: Consumed 31min 35.423s CPU time. [ 2471.277792] systemd[1]: ssh.service: Found left-over process 247 (sshd) in control group while starting unit. Ignoring. [ 2471.279106] systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. [ 2471.301732] systemd[1]: Starting OpenBSD Secure Shell server... [ 2471.499904] systemd[1]: Stopped target Bluetooth. [ 2471.603581] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2471.705456] systemd[1]: Started System Logging Service. [ 2471.713856] systemd[1]: systemd-journal-flush.service: Succeeded. [ 2471.723095] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2471.725073] systemd[1]: Stopped Journal Service. [ 2471.751772] systemd[1]: Starting Journal Service... [ 2471.887715] systemd[1]: Started OpenBSD Secure Shell server. [ 2471.928663] systemd-journald[14742]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2472.347857] systemd[1]: Started Journal Service. [ 2472.440708] systemd-journald[14742]: Received client request to flush runtime journal. VM DIAGNOSIS: 16:41:50 Registers: info registers vcpu 0 RAX=0000000000000050 RBX=ffff88800f5d0000 RCX=ffffffff81f2e4e4 RDX=00000000000001f7 RSI=ffffffff81f2e4f2 RDI=0000000000000007 RBP=00000000000101f7 RSP=ffff888038386ff8 R8 =0000000000000000 R9 =0000000000006d2c R10=0000000000010000 R11=0000000000000001 R12=00000000000003e7 R13=ffffed1001eba001 R14=dffffc0000000000 R15=ffff88800f5d0060 RIP=ffffffff81f2e4f6 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f145249e900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff87292bb31 CR3=000000000e112000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c XMM01=00ff00000000000000000000000000ff XMM02=00ff00000000000000000000000000ff XMM03=66207463656e6e6f6373696420646576 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000 XMM08=6500273d2720676e6974636570786500 XMM09=00000000000000000000000000000000 XMM10=3aadb12af98a0cf6dddb82fc6e3c09bf XMM11=9837409be8263e60c0fe4abaa79e4aef XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e50260 RBX=0000000000000001 RCX=ffffffff83e3833c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e50868 RBP=ffffed100112e000 RSP=ffff88800897fe70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85670788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e5026e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff8728fc510 CR3=000000000cace000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000000000ff XMM02=000000000000000000000000000000ff XMM03=5320444f4854454d5f54505952434e45 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=ffbc64ffffbc44ffffbc34ffffbc9f00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=9837409be8263e60c0fe4abaa79e4aef XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000